The DNS server implementation must implement the capability to centrally review and analyze audit records from multiple components within the system.

Automated mechanisms for centralized reviews and analyses include Security Information and Event Management products.

Verify the DNS server implementation is configured to implement the capability to centrally review and analyze audit records from multiple components within the system.

If the DNS server implementation is not configured to implement the capability to centrally review and analyze audit records from multiple components within the system, this is a finding.

Configure the DNS server implementation to implement the capability to centrally review and analyze audit records from multiple components within the system.