Back

Configure the Domain Name System in accordance with organizational standards.


CONTROL ID
12202
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain system hardening procedures., CC ID: 12001

This Control has the following implementation support Control(s):
  • Configure the Domain Name System query logging to organizational standards., CC ID: 12210
  • Configure the secure name/address resolution service (recursive or caching resolver)., CC ID: 01625
  • Configure the secure name/address resolution service (authoritative source)., CC ID: 01624


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Configure trusted DNS servers on enterprise assets. Example implementations include: configuring assets to use enterprise-controlled DNS servers and/or reputable externally accessible DNS servers. (CIS Control 4: Safeguard 4.9 Configure Trusted DNS Servers on Enterprise Assets, CIS Controls, V8)