网络安全 GRC 13 项
DDoS Resilience Assessment
此检查清单为英文版。
Assesses DDoS resilience covering risk assessment, network and application protections, mitigation services, response readiness, and testing.
NIST 800-53CISAISO 27001
免费 PDF 或 Word · 输入邮箱即可下载。
Risk & Architecture
- Are internet-facing assets and their availability requirements inventoried? *
- Is critical infrastructure designed with redundancy and no single point of failure? *
- Is origin infrastructure hidden behind the mitigation/CDN provider? *
Protection Layers
- Is volumetric (Layer 3/4) DDoS protection in place, typically via an upstream scrubbing service? *
- Is application-layer (Layer 7) protection configured for HTTP floods? *
- Is DNS infrastructure protected and resilient (anycast, redundant providers)? *
- Are rate limiting and connection controls tuned at the edge?
Provider & Capacity
- Does the mitigation provider have capacity exceeding plausible attack sizes? *
- Are always-on vs. on-demand mitigation modes chosen appropriately per asset?
- Are SLAs and escalation contacts with the provider documented? *
Response & Testing
- Is a DDoS response runbook documented with roles and escalation paths? *
- Are monitoring and alerting in place to detect attacks early? *
- Is the DDoS response plan tested or exercised periodically?
下载完整的DDoS Resilience Assessment检查清单
免费获取排版清晰、便于打印的 PDF，或可编辑的 Word 文档。