Configure policies and compliance
DigiCert® Posture Management includes 14 system-defined policies across 5 principles. Policies can’t be created or modified, but they can be enabled or disabled.
Policies are system-defined checks that evaluate domains against security and compliance standards. Each policy belongs to 1 of 5 principles.
Policy name | Description |
|---|---|
Availability & Redundancy | Checks that DNS infrastructure is reachable and resilient. |
Delegation Correctness | Checks that nameserver delegation is accurate and functional. |
Security Configuration | Checks that security mechanisms such as DNSSEC and email authentication are correctly configured. |
Protocol Compliance | Checks that mail routing records conform to relevant RFCs. |
Configuration Hygiene | Checks that registration and certificate data is current and valid. |
Each policy carries a posture impact value—the maximum number of points deducted from the posture score if the policy is violated. Policy checks map to one or more compliance frameworks: NIST SP 800-53, CA/B Forum, ISO/IEC 27001:2022, SOC 2 Trust Service Criteria, and CIS Controls v8.
Some policies require a connected DNS provider integration to evaluate a domain. Policies that run without an integration use external scan coverage only. See Scan coverage by integration for the full breakdown.