SC-7(20): Dynamic Isolation / Segregation
(Not part of any baseline)
- NIST Special Publication 800-53 Revision 5:
- SC-7(20): Dynamic Isolation and Segregation
The information system provides the capability to dynamically isolate/segregate [Assignment: organization-defined information system components] from other components of the system.
The capability to dynamically isolate or segregate certain internal components of organizational information systems is useful when it is necessary to partition or separate certain components of dubious origin from those components possessing greater trustworthiness. Component isolation reduces the attack surface of organizational information systems. Isolation of selected information system components is also a means of limiting the damage from successful cyber attacks when those attacks occur.