---

id: "SC-39(01)" title: "Hardware Separation" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-39.01" priority: "P1" implementation_level: "system" parent: "SC-39" enhancement: True

---

Statement

Implement hardware separation mechanisms to facilitate process isolation.

Guidance

Hardware-based separation of system processes is generally less susceptible to compromise than software-based separation, thus providing greater assurance that the separation will be enforced. Hardware separation mechanisms include hardware memory management.

Assessment Objective

hardware separation is implemented to facilitate process isolation.

System and communications protection policy

system design documentation

system configuration settings and associated documentation

system architecture

system documentation for hardware separation mechanisms

system documentation from vendors, manufacturers, or developers

independent verification and validation documentation

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

system developers/integrators

System capability implementing underlying hardware separation mechanisms for process separation