id: "SC-50" title: "Software-enforced Separation and Policy Enforcement" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-50" priority: "P1" implementation_level: "system"
Statement
Implement software-enforced separation and policy enforcement mechanisms between {{ insert: param, sc-50_odp }}.
Guidance
System owners may require additional strength of mechanism to ensure domain separation and policy enforcement for specific types of threats and environments of operation.
Assessment Objective
software-enforced separation and policy enforcement mechanisms are implemented between {{ insert: param, sc-50_odp }}.
System and communications protection policy
procedures addressing cross-domain policy enforcement
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
organizational personnel installing, configuring, and/or maintaining the system
Mechanisms supporting and/or implementing software-enforced separation and policy enforcement