diff --git a/tasks/base.yml b/tasks/base.yml
index 9b00360..dc67de4 100644
--- a/tasks/base.yml
+++ b/tasks/base.yml
@@ -43,3 +43,12 @@
     group: bind
     mode: 0750
     state: directory
+
+- name: add cron dnssec
+  template:
+    src: dnssec.j2
+    dest: /etc/cron.weekly/dnssec
+    owner: root
+    group: root
+    mode: 0700
+  tags: bind
diff --git a/test/integration/bind/serverspec/bind_spec.rb b/test/integration/bind/serverspec/bind_spec.rb
index c560837..aee7049 100644
--- a/test/integration/bind/serverspec/bind_spec.rb
+++ b/test/integration/bind/serverspec/bind_spec.rb
@@ -16,6 +16,14 @@ puts '================================'
   end
 end
 
+describe file('/etc/cron.weekly/dnssec') do
+  it { should be_file }
+  it { should be_mode 700 }
+  it { should be_owned_by 'root' }
+  it { should be_grouped_into 'root' }
+  it { should contain 'test.local' }
+end
+
 %w[
   test.local
   hello.local