+SC-07(29) Separate Subnets to Isolate Functions

SC-07(29) Separate Subnets to Isolate Functions

Control

Implement [Selection: physically; logically] separate subnetworks to isolate the following critical system components and functions: [Assignement: critical system components and functions].

Discussion

Separating critical system components and functions from other noncritical system components and functions through separate subnetworks may be necessary to reduce susceptibility to a catastrophic or debilitating breach or compromise that results in system failure. For example, physically separating the command and control function from the in-flight entertainment function through separate subnetworks in a commercial aircraft provides an increased level of assurance in the trustworthiness of critical system functions.

Assessment Objective

subnetworks are separated [Selection: physically; logically] to isolate [Assignement: critical system components and functions].

Assessment Method

Examine

System and communications protection policy procedures addressing boundary protection system design documentation system hardware and software system architecture system configuration settings and associated documentation criticality analysis system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developer organizational personnel with boundary protection responsibilities

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by SC-07(29) Separate Subnets to Isolate Functions – Assessment Procedure
is blocked by Cloud Infrastructure Security Subnet
is blocked by Security Management Subnets
is blocked by Separate Subnet for Connecting to Different Security Domains