SC-3(1): Hardware Separation

Control Family:

System and Communications Protection

Parent Control:

SC-3: Security Function Isolation

Threats Addressed:

Elevation of Privilege

Baselines:

(Not part of any baseline)

Previous Version:

NIST Special Publication 800-53 Revision 4:
SC-3(1): Hardware Separation

Control Statement

Employ hardware separation mechanisms to implement security function isolation.

Supplemental Guidance

Hardware separation mechanisms include hardware ring architectures that are implemented within microprocessors and hardware-enforced address segmentation used to support logically distinct storage objects with separate attributes (i.e., readable, writeable).