The organization administrators can set up Spam Control rules for their organization based on SPF Failure, DKIM failure, Organization Blacklists and so on. The rules can control whether the emails should be bounced back, or sent to quarantine. Refer
here for detailed instructions.