Skip to content

Denial of Service (DoS)

What is Denial of Service (DoS)?

An attack that aims to make a computer resource unavailable to its intended users by overwhelming it with traffic or requests. Distributed DoS (DDoS) attacks use multiple compromised systems to amplify the attack.

Information Security

Frameworks that govern denial of service (dos)

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on denial of service (dos)

Requirements naming denial of service (dos) across 3 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Dimension 7 Availability per X.805 Clause 6.7: Availability means that events affecting the network do not stop authorized users from reaching the services, applications, information flows, stored information and network elements they are entitled to....

X805-Dim7-Availability-Network-Resources-Information-Authorized-Access-No-Service-Denial · ITU-T X.805 Security Dimension 7 - Availability + Network Resources + Information Accessible to Authorized Users + Denial-of-Service Prevention + Resilience + Redundancy + Disaster Recovery + Business Continuity + DDoS Mitigation →
India CERT-In Cyber Security Directions 20221 control

Directions 1-4 establish the mandatory incident reporting regime - the highest-profile and most operationally demanding element of the 2022 Directions.

CERTIN-IncidentReporting-6Hour-Mandatory-Format-POC-20Categories-Section70B-Dir1to4 · CERT-In Directions 1-4 Incident Reporting - Mandatory 6-Hour Window + 20 Categories + Standardised Report Format + Designated Point of Contact + 24x7 Channel →
New Zealand Information Security Manual (NZISM)1 control

Agencies should prepare a Denial of Service (DoS) response plan that sets out: how to spot DoS precursors and other warning signs; how to work out what kind of incident or attack it is and the method used; how to determine where the DoS originates;

new-zealand-information-security-manual-nzism::18.3.18.C.01 · 18.3.18.C.01 Denial of service response plan for VTC and IPT →

Questions people ask about denial of service (dos)

What is Denial of Service (DoS)?
An attack that aims to make a computer resource unavailable to its intended users by overwhelming it with traffic or requests. Distributed DoS (DDoS) attacks use multiple compromised systems to amplify the attack.
Why is Denial of Service (DoS) important for compliance?
Denial of Service (DoS) is a key concept in Information Security. Understanding denial of service (dos) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Denial of Service (DoS)?
Denial of Service (DoS) appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, India CERT-In Cyber Security Directions 2022, New Zealand Information Security Manual (NZISM). Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Denial of Service (DoS)?
Explore our compliance framework pages to see how denial of service (dos) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Denial of Service (DoS) applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.