unified
UC-NET-07 — Secure name resolution and time services
Provide authoritative name-resolution service with origin authentication and integrity verification (e.g., DNSSEC), and perform data-origin authentication and integrity validation in recursive or caching resolvers. Architect name-resolution services to be fault tolerant and to enforce internal and external role separation, and synchronize system clocks to authoritative time sources so events can be correlated reliably.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- domain
- Network & Communications Security
- type
- preventive
- category
- technical
Details
- unified_id
- UC-NET-07
- title
- Secure name resolution and time services
- statement
- Provide authoritative name-resolution service with origin authentication and integrity verification (e.g., DNSSEC), and perform data-origin authentication and integrity validation in recursive or caching resolvers. Architect name-resolution services to be fault tolerant and to enforce internal and external role separation, and synchronize system clocks to authoritative time sources so events can be correlated reliably.
- domain
- Network & Communications Security
- control_type
- preventive
- control_category
- technical
- members
- framework
- nist-800-53
- control_id
- SC-20
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- SC-21
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- SC-22
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- SC-45
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-NET-07 — Secure name resolution and time services maps_to SC-20 — Secure Name/Address Resolution Service (Authoritative Source)
- framework
- nist-800-53
- control_id
- SC-20
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-NET-07 — Secure name resolution and time services mitigates Acceptance of data from untrustworthy sources
- strength
- primary
- rationale
- DNSSEC data-origin authentication and integrity validation in resolvers prevent acceptance of spoofed or cache-poisoned name-resolution data.
- UC-NET-07 — Secure name resolution and time services mitigates Single-site / single-region / single-supply concentration
- strength
- related
- rationale
- Architecting name-resolution services to be fault tolerant removes a name-service single point of failure.
- UC-NET-07 — Secure name resolution and time services maps_to SC-21 — Secure Name/Address Resolution Service (Recursive or Caching Resolver)
- framework
- nist-800-53
- control_id
- SC-21
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-NET-07 — Secure name resolution and time services maps_to SC-45 — System Time Synchronization
- framework
- nist-800-53
- control_id
- SC-45
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-NET-07 — Secure name resolution and time services mitigates Communications interception, eavesdropping and man-in-the-middle
- strength
- related
- rationale
- Authenticated, integrity-verified name resolution prevents DNS spoofing/redirection that enables man-in-the-middle.
- Security Control Assessment & POA&M Remediation tests UC-NET-07 — Secure name resolution and time services
- Secure Connectivity & Network Trust Services Operation operates UC-NET-07 — Secure name resolution and time services
- UC-NET-07 — Secure name resolution and time services maps_to SC-22 — Architecture and Provisioning for Name/Address Resolution Service
- framework
- nist-800-53
- control_id
- SC-22
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.