Back to catalog
NET-10.2NETNetwork Security
Secure Name / Address Resolution Service (Recursive or Caching Resolver)
Description
Mechanisms exist to perform data origin authentication and data integrity verification on the Domain Name Service (DNS) resolution responses received from authoritative sources when requested by client systems.
Cross-Mappings
37 paths across 3 frameworks
Cross-Mappings
NIST 800-531 mapping
SC-21
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
CCI4 mappings
CCI-002465
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002466
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002467
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002468
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
STIG20 mappings
SV-205209r961584_ruleA DNS server implementation must request data origin authentication verification on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 4 · disa_xccdf · related
SV-205210r961587_ruleA DNS server implementation must request data integrity verification on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 4 · disa_xccdf · related
SV-205211r961590_ruleA DNS server implementation must perform data integrity verification on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 4 · disa_xccdf · related
SV-205212r961593_ruleA DNS server implementation must perform data origin verification authentication on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 4 · disa_xccdf · related
SV-207489r958860_ruleThe VMM must request data origin authentication verification on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 2 · disa_xccdf · related
SV-207490r958862_ruleThe VMM must request data integrity verification on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 2 · disa_xccdf · related
SV-207491r958864_ruleThe VMM must perform data integrity verification on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 2 · disa_xccdf · related
SV-207492r958866_ruleThe VMM must perform data origin verification authentication on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 2 · disa_xccdf · related
SV-214191r612370_ruleA DNS server implementation must request data origin authentication verification on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 2 · disa_xccdf · related
SV-214192r612370_ruleA DNS server implementation must request data integrity verification on the name/address resolution responses the system receives from authoritative sources.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 2 · disa_xccdf · related
+10 more (top 10 by confidence shown)
Control mappings provided by the Secure Controls Framework (SCF).
SCF
Powered by the Secure Controls Framework
The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.
© SCF Council, LLC. Secure Controls Framework content is free and shown here with attribution. securecontrolsframework.com · About SCF on STIGViewer