Configure Trusted DNS Servers on Enterprise Assets

The organization implements several measures:

• configuring network devices to use enterprise-controlled DNS servers subject to strict security policies
• opting for reputable external DNS providers like Google's Public DNS or Cloudflare's DNS when needed
• leveraging security features such as DNS over HTTPS or TLS
• establishing redundancy with primary and secondary DNS setups for uninterrupted service

Examples of traffic filtering and monitoring systems are firewalls, routers, intrusion detection or prevention systems (IDS / IPS) and network devices / servers / applications with similar functionalities.

To ensure the functionality of filtering and monitoring:

• An owner has been appointed for the systems, who takes care of the proper operation of the system throughout the life cycle of the data processing environment
• It is the responsibility of the system owner to add, change, and delete settings for systems that filter or control traffic
• Documentation of the network and associated filtering and control systems is maintained throughout its lifecycle as an integral part of the change and settings management process
• The settings and desired operation of the systems are checked periodically during the operation and maintenance of the data processing environment and in the event of exceptional situations