사이버보안 GRC 13개 항목
DDoS Resilience Assessment
이 체크리스트는 영어로 제공됩니다.
Assesses DDoS resilience covering risk assessment, network and application protections, mitigation services, response readiness, and testing.
NIST 800-53CISAISO 27001
무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.
Risk & Architecture
- Are internet-facing assets and their availability requirements inventoried? *
- Is critical infrastructure designed with redundancy and no single point of failure? *
- Is origin infrastructure hidden behind the mitigation/CDN provider? *
Protection Layers
- Is volumetric (Layer 3/4) DDoS protection in place, typically via an upstream scrubbing service? *
- Is application-layer (Layer 7) protection configured for HTTP floods? *
- Is DNS infrastructure protected and resilient (anycast, redundant providers)? *
- Are rate limiting and connection controls tuned at the edge?
Provider & Capacity
- Does the mitigation provider have capacity exceeding plausible attack sizes? *
- Are always-on vs. on-demand mitigation modes chosen appropriately per asset?
- Are SLAs and escalation contacts with the provider documented? *
Response & Testing
- Is a DDoS response runbook documented with roles and escalation paths? *
- Are monitoring and alerting in place to detect attacks early? *
- Is the DDoS response plan tested or exercised periodically?
DDoS Resilience Assessment 체크리스트 전체 다운로드
인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.