Protecting domains from cyber security threats

THE DOMAIN Name Commission and CERT NZ have reached an agreement to share certain domain registration information to help enhance cyber security in New Zealand.

“We and InternetNZ are the stewards of the .nz domain space. We’re conscious of the role we play to help keep New Zealanders and their domains safe,” said Brent Carey, Domain Name Commissioner.

“We’re pleased to announce that we have signed a Memorandum of Understanding with CERT NZ, who will use their access to international cyber threat and vulnerability information together with withheld domain name registration information to alert domain owners in the .nz space to cyber security issues.”

The Memorandum of Understanding sets out how CERT NZ will be able to access withheld domain name registration information from the Domain Name Commission when cyber security threats are identified. “Where individuals have validly chosen our privacy option, it’s paramount we protect their privacy. Security of our domain name space critical infrastructure is equally as important. Putting this agreement in place means that we can protect that privacy while also giving CERT NZ access to some information that they need to help keep New Zealand safe,” said Carey.

As part of the newly signed agreement, the Domain Name Commission will share regular transparency reporting which will include high-level information on the withheld data accessed by CERT NZ.

Rob Pope, Director, CERT NZ, said cyber security has to be a team sport. “CERT NZ works alongside partners both in New Zealand and globally to help keep Kiwis safe online,” he said.

“We use our privileged access to information, such as the information we’ll be able to access under this new Memorandum of Understanding to help keep New Zealanders safe online.

When we’re alerted to issues that may affect New Zealand domain owners, this agreement means we can access the right information at the right time.”

The Memorandum of Understanding went into force last month and can be perused on the Domain Name Commission website. https://dnc.org.nz/irpo/mou