update docs

docs/github/enterprise/enable_email_notification_to_verified_domains.md

@@ -0,0 +1,27 @@
+---
+layout: default
+title: Enterprise Should Send Email Notifications Only To Verified Domains
+parent: Enterprise Policies
+grand_parent: GitHub Policies
+---
+
+
+## Enterprise Should Send Email Notifications Only To Verified Domains
+policy name: enable_email_notification_to_verified_domains
+
+severity: MEDIUM
+
+### Description
+The enterprise should mitigate the leakage of sensitive data by allowing email notifications to be sent only to verified or approved domains.
+
+
+### Remediation
+1. Make sure you are an enterprise owner
+2. Go to the Enterprise Landing page
+3. Under the ‘Settings’ tab on the left click ‘Verified & approved domains’
+4. Press the 'Add a domain' button and follow the instructions in the menu
+5. Check the 'Restrict email notifications to only approved or verified domains' box
+6. Press 'Save'
+
+
+