Skip to content

DNSSEC

What is DNSSEC?

Domain Name System Security Extensions, a suite of specifications that adds authentication to DNS responses to protect against cache poisoning and spoofing attacks.

Information Security

Terms that appear alongside dnssec

Each of these is named in at least one of the same controls as dnssec. The number is how many controls name both.

Frameworks that govern dnssec

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on dnssec

Requirements naming dnssec across 6 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications4 controls

Security Dimension 6 Data Integrity per X.805 Clause 6.6: Data Integrity ensures the correctness or accuracy of data. The data is protected against unauthorized modification + deletion + creation + replication and provides an indication of these unauthorized a...

X805-Dim6-Data-Integrity-Correctness-Accuracy-Unauthorized-Modification-Deletion-Detection · ITU-T X.805 Security Dimension 6 - Data Integrity + Correctness + Accuracy + Unauthorized Modification Prevention + Deletion Detection + Hashing + HMAC + Digital Signatures + Merkle Trees + Blockchain Integrity + File Integrity Monitoring (FIM) →
FedRAMP High2 controls

Request and perform data origin authentication and data integrity verification on name/address resolution responses; DNSSEC validation.

SC-21 · Secure Name/Address Resolution Service (Recursive or Caching Resolver) →
FedRAMP Moderate2 controls

Request and perform data origin authentication and data integrity verification on name/address resolution responses; DNSSEC validation.

SC-21 · Secure Name/Address Resolution Service (Recursive or Caching Resolver) →
NIST SP 800-53 Rev 5 LOW2 controls

Request and perform data origin authentication and data integrity verification on name/address resolution responses; DNSSEC validation.

SC-21 · Secure Name/Address Resolution Service (Recursive or Caching Resolver) →
NIST SP 800-53 Rev 5 MODERATE2 controls

Request and perform data origin authentication and data integrity verification on name/address resolution responses; DNSSEC validation.

SC-21 · Secure Name/Address Resolution Service (Recursive or Caching Resolver) →
NIST SP 800-53 Revision 5.1 HIGH2 controls

Request and perform data origin authentication and data integrity verification on name/address resolution responses; DNSSEC validation.

SC-21 · Secure Name/Address Resolution Service (Recursive or Caching Resolver) →

Questions people ask about dnssec

What is DNSSEC?
Domain Name System Security Extensions, a suite of specifications that adds authentication to DNS responses to protect against cache poisoning and spoofing attacks.
Why is DNSSEC important for compliance?
DNSSEC is a key concept in Information Security. Understanding dnssec helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address DNSSEC?
DNSSEC appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, FedRAMP High, FedRAMP Moderate, NIST SP 800-53 Rev 5 LOW, NIST SP 800-53 Rev 5 MODERATE. Across these standards we have identified 14 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about DNSSEC?
Explore our compliance framework pages to see how dnssec applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how DNSSEC applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.