NO-09—Domain Name Services Security Extensions (DNSSec)

>Control Description

Organization establishes a DNSSec implementation standard and uses mechanisms to verify the DNS infrastructure for compliance.

Theme

Process

Type

Preventive

Policy/Standard

Network Security Standard

>Implementation Guidance

1. Ensure that a process is defined and documented for a DNSSec implementation. 2. Ensure appropriate mechanism are in place to validate DNS infrastructure for compliance.

>Testing Procedure

1. Inspect documentation to determine whether requirements have been defined that outlines a DNSSec implementation. 2. Review a sample of DNS infrastructure used and ensure that they are following the DNSSec implementation requirements.