5.7.3.2
Establish Basic Perimeter Defenses
DNS Firewall
Establish Basic Perimeter Defenses – DNS Firewall – The organization shall implement a DNS firewall for outbound DNS requests to the Internet.
-
8.3 Information Access Restriction: Limit access to information and associated assets according to the established topic-specific access control policy.
8.12 Data Leakage Prevention: Apply data leakage prevention measures to systems, networks, and other devices handling sensitive information.
8.16 Monitoring Activities: Monitor networks, systems, and applications for unusual behavior and take appropriate actions to assess potential information security incidents.
8.20 Network Security: Secure, manage, and control networks and network devices to safeguard information in systems and applications.
8.21 Security of Network Services: Identify, implement, and monitor security mechanisms, service levels, and service requirements for network services.
-
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.
-
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.