Center for Federal Accountability

Agency domains are signed with DNSSEC (SHOULD; the 2008 memo was rescinded in 2018)

KAI-EXP-DNS · Draft, under analyst review

Authority

• nist-fips-200 (SP 800-53 SC-20)

Evidence

• P1: Observed: what anyone can see from the internet with ordinary requests

Sources: P1 DNS.

How it is checked

machine, 7 days.

FedRAMP Key Security Indicators: KSI-CNA-MAT.

Agency results

No agency has been graded on this requirement yet.