+SC-07(21) [H] Isolation of System Components
|
SC-07(21) [H] Isolation of System Components
Control
Employ boundary protection mechanisms to isolate [Assignement: system components] supporting [Assignement: missions and/or business functions].
Discussion
Organizations can isolate system components that perform different mission or business functions. Such isolation limits unauthorized information flows among system components and provides the opportunity to deploy greater levels of protection for selected system components. Isolating system components with boundary protection mechanisms provides the capability for increased protection of individual system components and to more effectively control information flows between those components. Isolating system components provides enhanced protection that limits the potential harm from hostile cyber-attacks and errors. The degree of isolation varies depending upon the mechanisms chosen. Boundary protection mechanisms include routers, gateways, and firewalls that separate system components into physically separate networks or subnetworks; cross-domain devices that separate subnetworks; virtualization techniques; and the encryption of information flows among system components using distinct encryption keys.
Assessment Objective
boundary protection mechanisms are employed to isolate [Assignement: system components] supporting [Assignement: missions and/or business functions].
Assessment Method
Examine
System and communications protection policy
procedures addressing boundary protection
system design documentation
system hardware and software
enterprise architecture documentation
system architecture
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
organizational personnel with boundary protection responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|