SC — System and Communications Protection

SC-1Policy and ProceduresLowModerateHigh SC-2Separation of System and User FunctionalityModerateHigh SC-3Security Function IsolationHigh SC-4Information in Shared System ResourcesModerateHigh SC-5Denial-of-service ProtectionLowModerateHigh SC-6Resource AvailabilityNot in a baseline SC-7Boundary ProtectionLowModerateHigh SC-8Transmission Confidentiality and IntegrityModerateHigh SC-9Transmission ConfidentialityWithdrawn SC-10Network DisconnectModerateHigh SC-11Trusted PathNot in a baseline SC-12Cryptographic Key Establishment and ManagementLowModerateHigh SC-13Cryptographic ProtectionLowModerateHigh SC-14Public Access ProtectionsWithdrawn SC-15Collaborative Computing Devices and ApplicationsLowModerateHigh SC-16Transmission of Security and Privacy AttributesNot in a baseline SC-17Public Key Infrastructure CertificatesModerateHigh SC-18Mobile CodeModerateHigh SC-19Voice Over Internet ProtocolWithdrawn SC-20Secure Name/Address Resolution Service (Authoritative Source)LowModerateHigh SC-21Secure Name/Address Resolution Service (Recursive or Caching Resolver)LowModerateHigh SC-22Architecture and Provisioning for Name/Address Resolution ServiceLowModerateHigh SC-23Session AuthenticityModerateHigh SC-24Fail in Known StateHigh SC-25Thin NodesNot in a baseline SC-26DecoysNot in a baseline SC-27Platform-independent ApplicationsNot in a baseline SC-28Protection of Information at RestModerateHigh SC-29HeterogeneityNot in a baseline SC-30Concealment and MisdirectionNot in a baseline SC-31Covert Channel AnalysisNot in a baseline SC-32System PartitioningNot in a baseline SC-33Transmission Preparation IntegrityWithdrawn SC-34Non-modifiable Executable ProgramsNot in a baseline SC-35External Malicious Code IdentificationNot in a baseline SC-36Distributed Processing and StorageNot in a baseline SC-37Out-of-band ChannelsNot in a baseline SC-38Operations SecurityNot in a baseline SC-39Process IsolationLowModerateHigh SC-40Wireless Link ProtectionNot in a baseline SC-41Port and I/O Device AccessNot in a baseline SC-42Sensor Capability and DataNot in a baseline SC-43Usage RestrictionsNot in a baseline SC-44Detonation ChambersNot in a baseline SC-45System Time SynchronizationNot in a baseline SC-46Cross Domain Policy EnforcementNot in a baseline SC-47Alternate Communications PathsNot in a baseline SC-48Sensor RelocationNot in a baseline SC-49Hardware-enforced Separation and Policy EnforcementNot in a baseline SC-50Software-enforced Separation and Policy EnforcementNot in a baseline SC-51Hardware-based ProtectionNot in a baseline