Has your organization configured all platforms to use only approved DNS services that include protection against malicious domains?

DNS (Domain Name System) services translate human-readable domain names into IP addresses. Configuring platforms to use only approved DNS services with malicious domain blocking capabilities helps prevent users from accessing known harmful websites and blocks communication with command and control servers used by malware. This control acts as an important security layer that can prevent data exfiltration and malware infections.

Evidence of implementation could include documentation of approved DNS services (such as Cisco Umbrella, Quad9, or CloudFlare DNS), configuration settings showing these services are enforced across platforms, and reports showing blocked access attempts to malicious domains.