+SC-32(01) Separate Physical Domains for Privileged Functions

SC-32(01) Separate Physical Domains for Privileged Functions

Control

Partition privileged functions into separate physical domains.

Discussion

Privileged functions that operate in a single physical domain may represent a single point of failure if that domain becomes compromised or experiences a denial of service.

Assessment Objective

privileged functions are partitioned into separate physical domains.

Assessment Method

Examine

System and communications protection policy procedures addressing system partitioning system design documentation system configuration settings and associated documentation system architecture list of system physical domains (or environments) system facility diagrams system network diagrams system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel installing, configuring, and/or maintaining the system system developers/integrators

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by SC-32(01) Separate Physical Domains for Privileged Functions – Assessment Procedure