Provide Domain Name Resolution Services and Provide Internet Routing, Access, and Connection Services Critical Functions Risk Assessment [open pdf - 3MB]
From the Executive Summary: "The Information Technology (IT) Sector provides services for the domain name system (DNS) and Internet routing, access, and connection capabilities that underpin nearly all infrastructure supporting global Internet communications. In 2009, the IT Sector Coordinating Council (SCC) and its partners within the Department of Homeland Security (DHS) conducted a baseline risk assessment of the IT Sector's critical functions, including DNS and Internet routing. Those findings, along with risk mitigation strategies developed in 2011 and 2013, have supported the IT Sector's ability to communicate risk both within the DNS and Internet routing communities, as well as to its many public and private stakeholders. Additionally, these efforts have been used to inform national-level responses to sector-wide queries. [...] This updated assessment of the Provide Domain Name Resolution Services and Provide Internet Routing, Access, and Connection Services Critical Functions Risk describes how specific existing and emerging threats, technologies, and standards affect the risk profiles of the IT Sector's DNS and Internet routing critical functions. The assessment also discusses currently deployed mitigations and potential additional mitigations that might be needed to address the identified risks."
U.S. Department of Homeland Security: https://www.dhs.gov/