Domain Name Services (DNS) Risk Assessment

This report describes how specific existing and emerging threats, technologies, and standards affect the risk profiles of the Information Technology (IT) Sector’s DNS and Internet routing critical functions. The results of this assessment can inform organizations utilizing the Cybersecurity Framework to assess their own risks, including the Identify – Business Environment and Identify – Risk Assessment Categories of the Framework.

The report was developed by experts from industry and government under the sponsorship of the IT Sector Coordinating Council (SCC) and IT Government Coordinating Council (GCC), with the DHS Office of Cybersecurity and Communications (CS&C) serving as the Sector Risk Management Agency (SRMA).