SC-36: Distributed Processing And Storage

CSF v1.1 References:

Threats Addressed:


  • Low


  • Moderate


  • High


Next Version:

Control Statement

The organization distributes [Assignment: organization-defined processing and storage] across multiple physical locations.

Supplemental Guidance

Distributing processing and storage across multiple physical locations provides some degree of redundancy or overlap for organizations, and therefore increases the work factor of adversaries to adversely impact organizational operations, assets, and individuals. This control does not assume a single primary processing or storage location, and thus allows for parallel processing and storage.

Control Enhancements

SC-36(1): Polling Techniques


(Not part of any baseline)

The organization employs polling techniques to identify potential faults, errors, or compromises to [Assignment: organization-defined distributed processing and storage components].