Control Family
SC — System and Communications Protection
51 controls · 111 enhancements
SC-1
Policy and Procedures
✓ LOW ✓ MODERATE ✓ HIGH SC-2
Separation of System and User Functionality
LOW ✓ MODERATE ✓ HIGH SC-3
Security Function Isolation
LOW MODERATE ✓ HIGH SC-4
Information in Shared System Resources
LOW ✓ MODERATE ✓ HIGH SC-5
Denial-of-service Protection
✓ LOW ✓ MODERATE ✓ HIGH SC-6
Resource Availability
LOW MODERATE HIGH SC-7
Boundary Protection
✓ LOW ✓ MODERATE ✓ HIGH SC-8
Transmission Confidentiality and Integrity
LOW ✓ MODERATE ✓ HIGH SC-10
Network Disconnect
LOW ✓ MODERATE ✓ HIGH SC-11
Trusted Path
LOW MODERATE HIGH SC-12
Cryptographic Key Establishment and Management
✓ LOW ✓ MODERATE ✓ HIGH SC-13
Cryptographic Protection
✓ LOW ✓ MODERATE ✓ HIGH SC-15
Collaborative Computing Devices and Applications
✓ LOW ✓ MODERATE ✓ HIGH SC-16
Transmission of Security and Privacy Attributes
LOW MODERATE HIGH SC-17
Public Key Infrastructure Certificates
LOW ✓ MODERATE ✓ HIGH SC-18
Mobile Code
LOW ✓ MODERATE ✓ HIGH SC-20
Secure Name/Address Resolution Service (Authoritative Source)
✓ LOW ✓ MODERATE ✓ HIGH SC-21
Secure Name/Address Resolution Service (Recursive or Caching Resolver)
✓ LOW ✓ MODERATE ✓ HIGH SC-22
Architecture and Provisioning for Name/Address Resolution Service
✓ LOW ✓ MODERATE ✓ HIGH SC-23
Session Authenticity
LOW ✓ MODERATE ✓ HIGH SC-24
Fail in Known State
LOW MODERATE ✓ HIGH SC-25
Thin Nodes
LOW MODERATE HIGH SC-26
Decoys
LOW MODERATE HIGH SC-27
Platform-independent Applications
LOW MODERATE HIGH SC-28
Protection of Information at Rest
LOW ✓ MODERATE ✓ HIGH SC-29
Heterogeneity
LOW MODERATE HIGH SC-30
Concealment and Misdirection
LOW MODERATE HIGH SC-31
Covert Channel Analysis
LOW MODERATE HIGH SC-32
System Partitioning
LOW MODERATE HIGH SC-34
Non-modifiable Executable Programs
LOW MODERATE HIGH SC-35
External Malicious Code Identification
LOW MODERATE HIGH SC-36
Distributed Processing and Storage
LOW MODERATE HIGH SC-37
Out-of-band Channels
LOW MODERATE HIGH SC-38
Operations Security
LOW MODERATE HIGH SC-39
Process Isolation
✓ LOW ✓ MODERATE ✓ HIGH SC-40
Wireless Link Protection
LOW MODERATE HIGH SC-41
Port and I/O Device Access
LOW MODERATE HIGH SC-42
Sensor Capability and Data
LOW MODERATE HIGH SC-43
Usage Restrictions
LOW MODERATE HIGH SC-44
Detonation Chambers
LOW MODERATE HIGH SC-45
System Time Synchronization
LOW MODERATE HIGH SC-46
Cross Domain Policy Enforcement
LOW MODERATE HIGH SC-47
Alternate Communications Paths
LOW MODERATE HIGH SC-48
Sensor Relocation
LOW MODERATE HIGH SC-49
Hardware-enforced Separation and Policy Enforcement
LOW MODERATE HIGH SC-50
Software-enforced Separation and Policy Enforcement
LOW MODERATE HIGH SC-51