SAC049: SSAC Report on DNS Zone Risk Assessment and Management

The SSAC recommends that registrants consider implementing [NINE] safeguards and proactive measures to manage the risk associated with loss, disruption, or inconsistent availability of name service:

(1) Thoroughly document all aspects of your DNS architecture and operations;

(2) Design for resiliency;

(3) Actively manage DNS information;

(4) Protect domain registration and hosting accounts against unauthorized access or misuse;

(5) Monitor the health and well being of your name service;

(6) Track operational statistics and trends;

(7) Develop a continuity plan for recovering from DNS;

(8) Before making changes in provisioning, plan carefully; and,

(9) Make informed choices when selecting DNS providers.

CLOSED