---
names: 
  full: "Google Cloud DNS Managed Zone DNSSEC is not enabled"
  contextual: "Managed Zone DNSSEC is not enabled"
description: "Cloud Domain Name System (DNS) is a fast, reliable and cost-effective \
 domain name system that powers millions of domains on the internet. \
 Domain Name System Security Extensions (DNSSEC) in Cloud DNS enables domain owners \ 
 to take easy steps to protect their domains against DNS hijacking and \ 
 man-in-the-middle and other attacks."
type: COMPLIANCE_POLICY
categories:
  - "SECURITY"
  - "RELIABILITY"
frameworkMappings:
  - "/frameworks/cis-gcp-v3.0.0/03/03"
  - "/frameworks/cloudaware/secret-and-certificate-governance/cryptographic-configuration"
  - "/frameworks/cloudaware/resource-reliability/system-configuration"
  - "/frameworks/nist-sp-800-53-r5/ac/18"
  - "/frameworks/nist-sp-800-53-r5/cm/02"
  - "/frameworks/nist-sp-800-53-r5/cm/06"
  - "/frameworks/nist-sp-800-53-r5/cm/07"
  - "/frameworks/nist-sp-800-53-r5/cm/09"
  - "/frameworks/pci-dss-v4.0/01/01/01"
  - "/frameworks/pci-dss-v4.0/01/02/01"
  - "/frameworks/pci-dss-v4.0/01/02/06"
  - "/frameworks/pci-dss-v4.0/01/02/07"
  - "/frameworks/pci-dss-v4.0/01/04/02"
  - "/frameworks/pci-dss-v4.0/01/05/01"
  - "/frameworks/pci-dss-v4.0/02/01/01"
  - "/frameworks/pci-dss-v4.0/02/02/01"
  - "/frameworks/iso-iec-27001-2013/08/02/03"
  - "/frameworks/iso-iec-27001-2022/08/09"
  - "/frameworks/nist-csf-v1.1/pr-ip/01"
  - "/frameworks/soc-2/cc5/02/02"
similarPolicies:
  cloudConformity:
    - url: "https://www.trendmicro.com/cloudoneconformity-staging/knowledge-base/gcp/CloudDNS/enable-dns-sec.html"
      name: "Enable DNSSEC for Google Cloud DNS Zones"