Schedule of activities for domain name administrators and technical contacts
This policy describes the schedule of activities that must be carried out by domain name administrators and technical contacts for each domain name under their remit.
The trusted domain name administrator
Yearly
- verify ownership and continued use of the domain names whose ownership you claim
- verify your contact details
- verify the contact details for each of the technical contacts
- verify requirement for self-administration and any delegation of access to named technical contacts
- ensure that domain names and the records contained therein adhere to NHS England policy
Upon change
- update the contact details for the technical contacts
- inform the DNS team of contract changes with third-parties, such as expiry of the contract that might leave delegations or pointer records orphaned
The technical contacts
Reporting by technical contacts is only necessary where sub-domains are implemented as off-infrastructure delegations.
Yearly
- report all records within the sub-domains owned
- confirm that there are no onward off-infrastructure delegations of sub-domains
- confirm that records within the domain owned are RFC compliant
- confirm that vendor lock-in records are not in use, such as type ANAME, ALIAS
- confirm that email security records relating to SPF, DMARC and DKIM are properly formatted
Upon change
- report all records within the sub-domains owned
- update CSOC with the necessary detail that permit them to collect query/response data
Near real-time
- dump query/response data to S3 bucket, storage account, cloud storage, or other (as agreed with CSOC) for collection by CSOC. Retain permanently until collection has been confirmed by CSOC then retain for 3 months
- request removal of defunct sub-domains and records
Compliance
Failure to comply with the schedule of activities will result in the domain being removed from your control and ultimately decommissioned
Last edited: 28 August 2024 2:05 pm