SC-32(1): Separate Physical Domains for Privileged Functions


(Not part of any baseline)

Info icon.

Control is new to this version of the control set.

Control Statement

Partition privileged functions into separate physical domains.

Supplemental Guidance

Privileged functions that operate in a single physical domain may represent a single point of failure if that domain becomes compromised or experiences a denial of service.