SC-22: Architecture and Provisioning for Name/Address Resolution Service

the systems that collectively provide name/address resolution services for an organization are fault-tolerant;

the systems that collectively provide name/address resolution services for an organization implement internal role separation;

the systems that collectively provide name/address resolution services for an organization implement external role separation.

System and communications protection policy

procedures addressing architecture and provisioning for name/address resolution services

access control policy and procedures

system design documentation

assessment results from independent testing organizations

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel with responsibilities for managing DNS

Mechanisms supporting and/or implementing name/address resolution services for fault tolerance and role separation