SC-32(1): Separate Physical Domains for Privileged Functions
(Not part of any baseline)
Control is new to this version of the control set.
Partition privileged functions into separate physical domains.
Privileged functions that operate in a single physical domain may represent a single point of failure if that domain becomes compromised or experiences a denial of service.