The National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 2.0 is the most widely adopted cybersecurity framework in the world. Organizations across sectors and geographies use it to structure their security programs, report to boards and regulators, and benchmark their maturity. When something is mapped to CSF 2.0, it becomes visible to the people who make security decisions.<\/p>\n
DNS security now has a formal place in the NIST CSF2.0.<\/strong><\/p>\n The NIST recently finalized the mapping of Special Publication 800-81 Revision 3 (SP 800-81r3), the Secure DNS Deployment Guide, to the Cybersecurity Framework 2.0 through its National Online Informative References (OLIR) Program. This means that organizations using CSF 2.0 can now see, in NIST\u2019s searchable catalog, exactly how DNS security controls map to the CSF outcomes they are working toward.<\/p>\n The OLIR mapping is the latest milestone in a sustained engagement with NIST and the global standards community. It follows the final publication of SP 800-81r3 in March 2026 and builds on Infoblox\u2019s ongoing work with NIST on SP 800-53 control revisions, the National Cybersecurity Center of Excellence\u2019s (NCCoE) AI agent identity and authorization project, and the NIST Cyber AI Profile.<\/p>\n The NIST OLIR program provides a structured, standardized way to express relationships between cybersecurity documents. The SP 800-81r3 mapping connects DNS security guidance to the CSF 2.0 subcategories where DNS plays a direct role. For example:<\/p>\n The full mapping with section-level detail is available in the NIST OLIR catalog<\/a>. It spans the three pillars of DNS security as defined in SP 800-81r3:<\/p>\n Each of these pillars now has a formal, traceable connection to the CSF 2.0 that organizations already use to structure and assess their cybersecurity programs.<\/p>\n For CISOs and security teams,<\/strong> the OLIR mapping brings important clarity. DNS security has too often been overlooked\u2014not for any lack of value, but because it has lacked an explicit place within the frameworks that security teams rely on. By formalizing this mapping, NIST has helped ensure that DNS security is properly recognized within CSF 2.0 and is now formally connected to the outcomes that security programs are already measured against. When an organization assesses its posture against CSF 2.0 subcategory DE.CM-01 (networks are monitored to find potentially adverse events), the OLIR catalog now points to SP 800-81r3\u2019s guidance on DNS monitoring and logging as a recognized implementation path.<\/p>\n The operational case for DNS security is already well established. According to Anne Neuberger, then Deputy National Security Advisor, 92 percent of malware relies on DNS at some stage of its lifecycle. CISA\u2019s own Protective DNS service blocked nearly 700 million connections from federal agencies to malicious domains between 2022 and 2023. What the OLIR mapping adds is the formal framework connection: the compliance and governance layer that allows organizations to translate that operational evidence into the CSF 2.0 assessments their boards and regulators expect.<\/p>\n For compliance and audit teams,<\/strong> the mapping provides auditable traceability. Organizations that demonstrate DNS security controls aligned with SP 800-81r3 can now reference the OLIR mapping as evidence of CSF 2.0 alignment. This is particularly relevant for organizations in regulated sectors, including financial services, healthcare, energy and government, where CSF 2.0 compliance is either required or strongly expected.<\/p>\n For procurement teams,<\/strong> the mapping provides a standards-based reference point for evaluating DNS security solutions. Requirements can be tied to specific CSF 2.0 subcategories, with SP 800-81r3 as the implementation guidance.<\/p>\n While NIST frameworks originate in the United States, their influence extends well beyond U.S. borders. CSF 2.0 is referenced or adopted by regulators and standards bodies in the European Union, the United Kingdom, Australia, New Zealand, Singapore, Malaysia, Thailand and across the broader Asia-Pacific region.<\/p>\n The European Union\u2019s (EU) NIS2 Directive implementing guidance already references concepts aligned with CSF 2.0. The U.K.\u2019s National Cyber Security Centre Cyber Assessment Framework shares structural similarities with CSF 2.0. Australia\u2019s Essential Eight and the Protective Security Policy Framework reference NIST publications as part of their guidance ecosystem.<\/p>\n In Southeast Asia, where regulators in Singapore, Malaysia and Thailand align more closely with CSF 2.0 than with individual NIST special publications, the OLIR mapping provides a direct bridge between the framework they already reference and the DNS security implementation guidance they can now adopt.<\/p>\n For organizations operating across multiple regulatory environments, this provides a consistent, internationally recognized reference point for DNS security as a component of their cybersecurity program.<\/p>\n For organizations using CSF 2.0 to structure their cybersecurity programs, we recommend the following:<\/p>\nWhat Is in the OLIR Mapping?<\/h3>\n
\n
\n
Why This Matters for Organizations<\/h3>\n
The Global Dimension<\/h3>\n
What to Do Next<\/h3>\n
\n