simpl.
Anmelden
Cybersicherheits-GRC 14 Punkte

DNS Security Controls Review

Diese Checkliste ist auf Englisch.

Reviews DNS security controls across resolver protection, DNSSEC, protective filtering, logging, and registrar/zone integrity to defend against tunneling, hijacking, and abuse.

NIST 800-81NIST 800-53CIS v8

Kostenlos als PDF oder Word · E-Mail-Adresse eingeben und herunterladen.

Resolver & Filtering

  • Are endpoints restricted to approved internal or protective DNS resolvers? *
  • Is protective DNS filtering used to block known-malicious domains? *
  • Is outbound DNS to unauthorized external resolvers blocked at the firewall? *
  • Is encrypted DNS (DoH/DoT) governed by policy rather than uncontrolled?

DNSSEC & Integrity

  • Is DNSSEC signing enabled for authoritative zones you control? *
  • Is DNSSEC validation enabled on recursive resolvers? *
  • Are DNSSEC keys rotated and DS records maintained at the registrar?

Registrar & Zone Protection

  • Is registrar/registry lock enabled to prevent unauthorized domain transfers? *
  • Is MFA enforced on registrar and DNS management accounts? *
  • Are zone changes subject to change control and review?
  • Are critical domain expiration dates monitored and auto-renewal enabled?

Monitoring & Detection

  • Are DNS query logs collected and retained for analysis? *
  • Is DNS tunneling and anomalous query behavior monitored? *
  • Are newly registered and typosquat lookalike domains monitored?

Vollständige Checkliste DNS Security Controls Review herunterladen

Kostenlos als übersichtliches, druckfertiges PDF oder als bearbeitbares Word-Dokument.