SC-3(1): Hardware Separation

Control Family:

System And Communications Protection

Parent Control:

SC-3: Security Function Isolation

Priority:

P1: Implement P1 security controls first.

Threats Addressed:

Elevation of Privilege

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
SC-3(1): Hardware Separation

Control Statement

The information system utilizes underlying hardware separation mechanisms to implement security function isolation.

Supplemental Guidance

Underlying hardware separation mechanisms include, for example, hardware ring architectures, commonly implemented within microprocessors, and hardware-enforced address segmentation used to support logically distinct storage objects with separate attributes (i.e., readable, writeable).