---
names: 
  full: "Google Cloud DNS Managed Zone DNSSEC is not enabled"
  contextual: "Managed Zone DNSSEC is not enabled"
description: "Cloud Domain Name System (DNS) is a fast, reliable and cost-effective \
 domain name system that powers millions of domains on the internet. \
 Domain Name System Security Extensions (DNSSEC) in Cloud DNS enables domain owners \ 
 to take easy steps to protect their domains against DNS hijacking and \ 
 man-in-the-middle and other attacks."
type: COMPLIANCE_POLICY
categories:
  - "SECURITY"
  - "RELIABILITY"
frameworkMappings:
  - /frameworks/cis-gcp-v3.0.0/03/03
  - /frameworks/cloudaware/resource-security/threat-protection
  - /frameworks/cloudaware/resource-reliability/system-configuration
  - /frameworks/nist-sp-800-53-r5/ac/18
  - /frameworks/nist-sp-800-53-r5/cm/02
  - /frameworks/nist-sp-800-53-r5/cm/06
  - /frameworks/nist-sp-800-53-r5/cm/07
  - /frameworks/nist-sp-800-53-r5/cm/09
  - /frameworks/pci-dss-v4.0/01/01/01
  - /frameworks/pci-dss-v4.0/01/02/01
  - /frameworks/pci-dss-v4.0/01/02/06
  - /frameworks/pci-dss-v4.0/01/02/07
  - /frameworks/pci-dss-v4.0/01/04/02
  - /frameworks/pci-dss-v4.0/01/05/01
  - /frameworks/pci-dss-v4.0/02/01/01
  - /frameworks/pci-dss-v4.0/02/02/01
  - /frameworks/iso-iec-27001-2013/08/02/03
  - /frameworks/iso-iec-27001-2022/08/09
  - /frameworks/nist-csf-v1.1/pr-ip/01
  - /frameworks/soc-2/cc5/02/02
similarPolicies:
  cloudConformity:
    - url: "https://www.trendmicro.com/cloudoneconformity-staging/knowledge-base/gcp/CloudDNS/enable-dns-sec.html"
      name: "Enable DNSSEC for Google Cloud DNS Zones"
