id: "SC-50" title: "Software-enforced Separation and Policy Enforcement" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-50" priority: "P1" implementation_level: "system"


Statement

Implement software-enforced separation and policy enforcement mechanisms between {{ insert: param, sc-50_odp }}.

Guidance

System owners may require additional strength of mechanism to ensure domain separation and policy enforcement for specific types of threats and environments of operation.

Assessment Objective

software-enforced separation and policy enforcement mechanisms are implemented between {{ insert: param, sc-50_odp }}.

System and communications protection policy

procedures addressing cross-domain policy enforcement

system design documentation

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

Mechanisms supporting and/or implementing software-enforced separation and policy enforcement