NIST has just updated its guidance for Domain Name System (DNS) security. The last version of this document (Secure Domain Name System (DNS) Deployment Guide) (SP 800-81r3), was last updated way back in 2013. It's been updated with good protective DNS measures and recommendations that all organisations should adopt as a baseline, largely: Employ protective DNS wherever technically feasible to provide additional network wide security capabilities that include: Blocking harm