Page 125 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Fire and EMS devolution planning determines the essential minimum service level and how service delivery changes when resources no longer meet community need. The plan should identify trigger points for altering services and separate triggers and phasing for reconstituting those services.
Read the checklist
NIST SP 800-221A provides an outcomes framework intended to apply across types of ICT risk. The source names cybersecurity, privacy, and supply-chain risk as examples and positions the framework as complementary to SP 800-221.
Read the explainer
Before relocation, reconstitution procedures should verify that systems, communications, and other capabilities required for essential functions are operational at the restored or replacement facility.
Read the guide
A delegation of authority should state the circumstances in which delegated authority becomes effective and when it terminates. The instrument should delineate limits and accountability and state whether a successor may redelegate functions and activities.
Read the playbook
DNAME substitution replaces only the whole suffix labels that match the DNAME owner with the labels in the DNAME target. A DNAME redirects names below its owner; unlike a CNAME, it does not redirect the DNAME owner name itself.
Read the briefing
An SRV record identifies a service endpoint with priority, weight, port, and target fields. A client first selects reachable SRV targets with the lowest priority value, then uses weight to choose among targets at that priority.
Read the checklist
An IDNA label passes the Bidi Rule only if all six conditions in the rule are satisfied. The first character determines direction: R or AL makes an RTL label, while L makes an LTR label. An RTL label cannot contain both European-number and Arabic-number Bidi properties.
Read the explainer
In the DHCPv4 Client FQDN option, S requests server responsibility for the A-record update, N requests no server updates, and O reports that the server overrode the requested S value. A client requesting server-performed forward updates sets S to 1 and sets O and N to 0 in its Client FQDN option.
Read the guide
A zone’s serial must be changed whenever its data changes; otherwise, secondaries will not transfer the new zone data. Every delegated name server should answer authoritatively for the zone; a delegated server that does not serve the zone creates a lame delegation.
Read the playbook
A SIG(0) request signature is placed at the end of the additional section and covers the DNS request, including its DNS header but excluding UDP/IP headers.
Read the briefing