id: "SC-30(05)" title: "Concealment of System Components" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-30.05" priority: "P1" implementation_level: "organization" parent: "SC-30" enhancement: True


Statement

Employ the following techniques to hide or conceal {{ insert: param, sc-30.05_odp.02 }}: {{ insert: param, sc-30.05_odp.01 }}.

Guidance

By hiding, disguising, or concealing critical system components, organizations may be able to decrease the probability that adversaries target and successfully compromise those assets. Potential means to hide, disguise, or conceal system components include the configuration of routers or the use of encryption or virtualization techniques.

Assessment Objective

{{ insert: param, sc-30.05_odp.01 }} are employed to hide or conceal {{ insert: param, sc-30.05_odp.02 }}.

System and communications protection policy

configuration management policy and procedures

procedures addressing concealment and misdirection techniques for the system

system design documentation

system configuration settings and associated documentation

list of techniques employed to hide or conceal system components

list of system components to be hidden or concealed

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel with the responsibility to conceal system components

Mechanisms supporting and/or implementing techniques for the concealment of system components