Proactively protecting your company against such threats at the DNS control-point, as opposed to retroactive triage and remediation, simply makes sense. But layering an enterprise DNS security solution into your defense stack should be done in conjunction with enforcing DNS best practices. The following are industry standards that will help prevent DNS exploitation and, when coupled with an enterprise threat protection service, will aid you in identifying, blocking, and mitigating threats, as well as enforcing Acceptable Use Policies across your organization.