SC-51 SC · System and Communications Protection

Hardware-based Protection

LOW MODERATE HIGH
0 Overlays 0 Related Controls
Graph
Export ▾

Requirements NIST SOURCE

Discussion (NIST Supplemental Guidance)

None.

Implementation Guidance

Engineering Interpretation

Original engineering commentary written for this explorer — not NIST source text and not authoritative guidance.

No engineering interpretation has been authored for SC-51 yet. This section is architected to receive it — see the Requirements and Assessment sections above for the authoritative NIST source content in the meantime.

Assessment

NIST SP 800-53A REV 5.2.0

Assessment Objectives

  1. system firmware components requiring hardware-based write-protect are defined;
  2. authorized individuals requiring procedures for disabling and re-enabling hardware write-protect are defined;
  3. hardware-based write-protect for <SC-51_ODP[01] system firmware components> is employed;
  4. specific procedures are implemented for <SC-51_ODP[02] authorized individuals> to manually disable hardware write-protect for firmware modifications;
  5. specific procedures are implemented for <SC-51_ODP[02] authorized individuals> to re-enable the write-protect prior to returning to operational mode.

Examine

[SELECT FROM: System and communications protection policy; procedures addressing firmware modifications; system design documentation; system configuration settings and associated documentation; system architecture; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel installing, configuring, and/or maintaining the system; system developers/integrators].

Test

[SELECT FROM: Organizational processes for modifying system firmware; mechanisms supporting and/or implementing hardware-based write-protection for system firmware].

STIGs & CCIs

No STIG checks or CCI mappings are currently loaded for SC-51. This section is architected to display, per product: STIG ID, Finding ID, Severity, Title, Description, Check, Fix, CCI, and NIST control mapping — but nothing is populated here until a real DISA STIG/CCI dataset is ingested.

Learn more about STIG/CCI integration →

Evidence

Potential Evidence — Derived

Categorized from the SP 800-53A "Examine"/"Test" artifact list above by keyword — not an authoritative NIST evidence list.

Policy

  • System and communications protection policy
  • system security plan

Configuration

  • system design documentation
  • system configuration settings and associated documentation
  • system architecture

Testing

  • Organizational processes for modifying system firmware
  • mechanisms supporting and/or implementing hardware-based write-protection for system firmware

Other Records

  • procedures addressing firmware modifications
  • system audit records
  • other relevant documents or records