Scope
Agree the organisational boundary, known domains, exclusions, sponsor, validators and expected estate scale.
Domain Estate Review
A bounded, evidence-led review of registered-domain ownership, authority, dependencies and incident readiness within an agreed organisational scope.
The review applies the free Domain Governance Baseline. The professional work is the evidence gathering, normalisation, reconciliation, judgement and validation needed to apply it to a real estate.
The question
Domain estates often accumulate through projects, suppliers, defensive registrations, campaigns, legacy services, redirects, mergers and organisational change. The obvious primary domain is rarely the whole story.
The review seeks whole-estate visibility within the agreed scope without claiming completeness where the evidence cannot support it.
Review method
Agree the organisational boundary, known domains, exclusions, sponsor, validators and expected estate scale.
Gather the smallest useful body of existing records and identify where evidence is missing or disputed.
Build a consistent registered-domain estate view rather than relying on disconnected provider exports and spreadsheets.
Use public signals only where they substantiate, challenge or clarify a governance question.
Connect ownership, registrar/DNS authority, email use, services, suppliers, change pathways and recovery responsibilities.
Reconcile findings with accountable people, then prioritise only the decisions and actions that materially remain.
What you leave with
A normalised operational record of registered domains, purpose, ownership, registrar/DNS authority, renewal, email/service use, dependencies and supporting evidence.
A concise view of who owns what, where technical authority sits, what depends on each domain and how change or recovery actually happens.
A short narrative organised around the five Domain Governance Baseline practices, with confirmed position, unresolved uncertainty, decisions and prioritised actions.
The review focuses on domain governance, operating evidence and decision-making. It complements specialist security testing, certification and formal assurance where those are required.
Where I have no material operational responsibility for the in-scope estate, the engagement may provide an independent perspective. Where I or a contracting entity materially operates the relevant registrar, DNS or control environment, the engagement is described instead as an external, evidence-led review.
Large estates can be reviewed in explicit phases, with the scope and level of coverage made clear in the resulting artefacts.
Start with the estate you know
Known primary domains, any existing list, available provider information, a sponsor and people able to validate findings are enough to begin scoping.