Network Security - DNS Domains Expiring Within the Next Month

Description

The percentage of DNS domains that are set to expire within the next month, which could lead to service disruptions if not renewed in time.

How we measure it

Find all domains registered with DNSimple. Domains are considered compliant if they are set to auto-renew, or don't expire within the next 30 days.

Meta Data

Attribute	Value
Metric id	ns_domains_expiring
Category	Network Security
SLO	99.00% - 100.00%
Weight	0.2
Type

References

Framework	Ref	Domain	Control
ISO 27001:2022	A.8.20	8 Technological controls	Networks security
CIS 8.1	9.3	Email and Web Browser Protections	Maintain and Enforce Network-Based URL Filters
NIST CSF v2.0	ID.AM-04	Asset Management (ID.AM)	ID.AM-04: Inventories of services provided by suppliers are maintained

Code

SELECT
  name AS resource,
  'domain' AS resource_type,
  CASE WHEN auto_renew OR CAST(expires_on AS DATE) > CURRENT_DATE + 30 THEN 1 ELSE 0 END AS compliance,
  'Expires ' || CAST(CAST(expires_on AS DATE) AS VARCHAR) || CASE WHEN auto_renew THEN ', auto-renew on' ELSE ', auto-renew off' END AS detail
FROM {{ ref('dnsimple_domains') }}
WHERE state = 'registered'