As a security consultant, what are some of the things you would recommend to a company to ensure DNS security?