SC-21: Secure Name/Address Resolution Service (Recursive or Caching Resolver)

data origin authentication is requested for the name/address resolution responses that the system receives from authoritative sources;

data origin authentication is performed on the name/address resolution responses that the system receives from authoritative sources;

data integrity verification is requested for the name/address resolution responses that the system receives from authoritative sources;

data integrity verification is performed on the name/address resolution responses that the system receives from authoritative sources.

System and communications protection policy

procedures addressing secure name/address resolution services (recursive or caching resolver)

system design documentation

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel with responsibilities for managing DNS

Mechanisms supporting and/or implementing data origin authentication and data integrity verification for name/address resolution services