Make sure that the sending systems you use support DKIM.

Make sure that the emails are DKIM signed.

Make sure that the signing domain aligns with the “From” domain.

Make sure that you use a DKIM key size over 1024 bits (a 2048 bit key is advisable)

Make sure, where possible, that the DKIM selectors you choose closely identify the sending service so you can distinguish between them.

Make sure to revoke any keys that have been compromised.

Make sure that the DKIM keys you manage are rotated on regular basis.

Make sure that the DKIM key syntax is correct.

Make sure that there exists a public key for each corresponding private key that signs your emails.