Page 22 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DNS over HTTPS protects client-to-resolver traffic, but unmanaged external resolvers can bypass enterprise filtering, logging, caching, internal naming, and split-DNS behavior.
Read the explainer
NIST frames enterprise patching as planned preventive maintenance: identify, prioritize, acquire, install, verify, and govern updates across their full operating lifecycle.
Read the guide
NIST SP 800-61 Rev. 3 integrates incident response across Govern, Identify, Protect, Detect, Respond, and Recover instead of isolating it as an emergency-only process.
Read the playbook
Cyber recovery requires prioritized resources, service-specific playbooks, realistic testing, measurable outcomes, and continuous improvement—not merely a successful backup job.
Read the playbook
A useful contingency plan connects business processes to system components, prioritizes recovery needs, selects practical strategies, and proves the procedures through training and exercises.
Read the guide
FEMA continuity guidance connects essential functions to authority, people, facilities, communications, vital records, technology, devolution, reconstitution, and recurring exercises.
Read the checklist
NIST zero trust architecture removes implicit trust based on network location or ownership and makes access to each resource an explicit identity, device, context, and policy decision.
Read the explainer
CISA’s maturity model organizes zero-trust progress across Identity, Devices, Networks, Applications and Workloads, and Data with visibility, automation, and governance spanning each pillar.
Read the guide
Current joint guidance centers effective logging on approved policy, centralized collection and correlation, protected log integrity, and detections designed for relevant threats.
Read the checklist
NIST’s durable log-management structure starts with policy, organization-wide responsibility, infrastructure, operating processes, and supported staff—not a particular analytics product.
Read the guide