SC — System and Communications Protection
NIST SP 800-53 Rev. 5 Controls
140 articles
- NIST SP 800-53 Rev. 5 SC-1 — Policy And Procedures
- NIST SP 800-53 Rev. 5 SC-2 — Separation Of System And User Functionality
- NIST SP 800-53 Rev. 5 SC-2(1) — Interfaces For Non-Privileged Users
- NIST SP 800-53 Rev. 5 SC-2(2) — Disassociability
- NIST SP 800-53 Rev. 5 SC-3 — Security Function Isolation
- NIST SP 800-53 Rev. 5 SC-3(1) — Hardware Separation
- NIST SP 800-53 Rev. 5 SC-3(2) — Access And Flow Control Functions
- NIST SP 800-53 Rev. 5 SC-3(3) — Minimize Nonsecurity Functionality
- NIST SP 800-53 Rev. 5 SC-3(4) — Module Coupling And Cohesiveness
- NIST SP 800-53 Rev. 5 SC-3(5) — Layered Structures
- NIST SP 800-53 Rev. 5 SC-4 — Information In Shared System Resources
- NIST SP 800-53 Rev. 5 SC-4(1) — Security Levels
- NIST SP 800-53 Rev. 5 SC-4(2) — Multilevel Or Periods Processing
- NIST SP 800-53 Rev. 5 SC-5 — Denial-Of-Service Protection
- NIST SP 800-53 Rev. 5 SC-5(1) — Restrict Ability To Attack Other Systems
- NIST SP 800-53 Rev. 5 SC-5(2) — Capacity, Bandwidth, And Redundancy
- NIST SP 800-53 Rev. 5 SC-5(3) — Detection And Monitoring
- NIST SP 800-53 Rev. 5 SC-6 — Resource Availability
- NIST SP 800-53 Rev. 5 SC-7 — Boundary Protection
- NIST SP 800-53 Rev. 5 SC-7(3) — Access Points
- NIST SP 800-53 Rev. 5 SC-7(4) — External Telecommunications Services
- NIST SP 800-53 Rev. 5 SC-7(5) — Deny By Default -- Allow By Exception
- NIST SP 800-53 Rev. 5 SC-7(7) — Split Tunneling For Remote Devices
- NIST SP 800-53 Rev. 5 SC-7(8) — Route Traffic To Authenticated Proxy Servers
- NIST SP 800-53 Rev. 5 SC-7(9) — Restrict Threatening Outgoing Communications Traffic
- NIST SP 800-53 Rev. 5 SC-7(10) — Prevent Exfiltration
- NIST SP 800-53 Rev. 5 SC-7(11) — Restrict Incoming Communications Traffic
- NIST SP 800-53 Rev. 5 SC-7(12) — Host-Based Protection
- NIST SP 800-53 Rev. 5 SC-7(13) — Isolation Of Security Tools, Mechanisms, And Support Components
- NIST SP 800-53 Rev. 5 SC-7(14) — Protect Against Unauthorized Physical Connections
- NIST SP 800-53 Rev. 5 SC-7(15) — Networked Privileged Accesses
- NIST SP 800-53 Rev. 5 SC-7(16) — Prevent Discovery Of System Components
- NIST SP 800-53 Rev. 5 SC-7(17) — Automated Enforcement Of Protocol Formats
- NIST SP 800-53 Rev. 5 SC-7(18) — Fail Secure
- NIST SP 800-53 Rev. 5 SC-7(19) — Block Communication From Non-Organizationally Configured Hosts
- NIST SP 800-53 Rev. 5 SC-7(20) — Dynamic Isolation And Segregation
- NIST SP 800-53 Rev. 5 SC-7(21) — Isolation Of System Components
- NIST SP 800-53 Rev. 5 SC-7(22) — Separate Subnets For Connecting To Different Security Domains
- NIST SP 800-53 Rev. 5 SC-7(23) — Disable Sender Feedback On Protocol Validation Failure
- NIST SP 800-53 Rev. 5 SC-7(24) — Personally Identifiable Information
- NIST SP 800-53 Rev. 5 SC-7(25) — Unclassified National Security System Connections
- NIST SP 800-53 Rev. 5 SC-7(26) — Classified National Security System Connections
- NIST SP 800-53 Rev. 5 SC-7(27) — Unclassified Non-National Security System Connections
- NIST SP 800-53 Rev. 5 SC-7(28) — Connections To Public Networks
- NIST SP 800-53 Rev. 5 SC-7(29) — Separate Subnets To Isolate Functions
- NIST SP 800-53 Rev. 5 SC-8 — Transmission Confidentiality And Integrity
- NIST SP 800-53 Rev. 5 SC-8(1) — Cryptographic Protection
- NIST SP 800-53 Rev. 5 SC-8(2) — Pre- And Post-Transmission Handling
- NIST SP 800-53 Rev. 5 SC-8(3) — Cryptographic Protection For Message Externals
- NIST SP 800-53 Rev. 5 SC-8(4) — Conceal Or Randomize Communications
- NIST SP 800-53 Rev. 5 SC-8(5) — Protected Distribution System
- NIST SP 800-53 Rev. 5 SC-10 — Network Disconnect
- NIST SP 800-53 Rev. 5 SC-11 — Trusted Path
- NIST SP 800-53 Rev. 5 SC-11(1) — Irrefutable Communications Path
- NIST SP 800-53 Rev. 5 SC-12 — Cryptographic Key Establishment And Management
- NIST SP 800-53 Rev. 5 SC-12(1) — Availability
- NIST SP 800-53 Rev. 5 SC-12(2) — Symmetric Keys
- NIST SP 800-53 Rev. 5 SC-12(3) — Asymmetric Keys
- NIST SP 800-53 Rev. 5 SC-12(6) — Physical Control Of Keys
- NIST SP 800-53 Rev. 5 SC-13 — Cryptographic Protection
- NIST SP 800-53 Rev. 5 SC-15 — Collaborative Computing Devices And Applications
- NIST SP 800-53 Rev. 5 SC-15(1) — Physical Or Logical Disconnect
- NIST SP 800-53 Rev. 5 SC-15(3) — Disabling And Removal In Secure Work Areas
- NIST SP 800-53 Rev. 5 SC-15(4) — Explicitly Indicate Current Participants
- NIST SP 800-53 Rev. 5 SC-16 — Transmission Of Security And Privacy Attributes
- NIST SP 800-53 Rev. 5 SC-16(1) — Integrity Verification
- NIST SP 800-53 Rev. 5 SC-16(2) — Anti-Spoofing Mechanisms
- NIST SP 800-53 Rev. 5 SC-16(3) — Cryptographic Binding
- NIST SP 800-53 Rev. 5 SC-17 — Public Key Infrastructure Certificates
- NIST SP 800-53 Rev. 5 SC-18 — Mobile Code
- NIST SP 800-53 Rev. 5 SC-18(1) — Identify Unacceptable Code And Take Corrective Actions
- NIST SP 800-53 Rev. 5 SC-18(2) — Acquisition, Development, And Use
- NIST SP 800-53 Rev. 5 SC-18(3) — Prevent Downloading And Execution
- NIST SP 800-53 Rev. 5 SC-18(4) — Prevent Automatic Execution
- NIST SP 800-53 Rev. 5 SC-18(5) — Allow Execution Only In Confined Environments
- NIST SP 800-53 Rev. 5 SC-20 — Secure Name/Address Resolution Service (Authoritative Source)
- NIST SP 800-53 Rev. 5 SC-20(2) — Data Origin And Integrity
- NIST SP 800-53 Rev. 5 SC-21 — Secure Name/Address Resolution Service (Recursive Or Caching Resolver)
- NIST SP 800-53 Rev. 5 SC-22 — Architecture And Provisioning For Name/Address Resolution Service
- NIST SP 800-53 Rev. 5 SC-23 — Session Authenticity
- NIST SP 800-53 Rev. 5 SC-23(1) — Invalidate Session Identifiers At Logout
- NIST SP 800-53 Rev. 5 SC-23(3) — Unique System-Generated Session Identifiers
- NIST SP 800-53 Rev. 5 SC-23(5) — Allowed Certificate Authorities
- NIST SP 800-53 Rev. 5 SC-24 — Fail In Known State
- NIST SP 800-53 Rev. 5 SC-25 — Thin Nodes
- NIST SP 800-53 Rev. 5 SC-26 — Decoys
- NIST SP 800-53 Rev. 5 SC-27 — Platform-Independent Applications
- NIST SP 800-53 Rev. 5 SC-28 — Protection Of Information At Rest
- NIST SP 800-53 Rev. 5 SC-28(1) — Cryptographic Protection
- NIST SP 800-53 Rev. 5 SC-28(2) — Offline Storage
- NIST SP 800-53 Rev. 5 SC-28(3) — Cryptographic Keys
- NIST SP 800-53 Rev. 5 SC-29 — Heterogeneity
- NIST SP 800-53 Rev. 5 SC-29(1) — Virtualization Techniques
- NIST SP 800-53 Rev. 5 SC-30 — Concealment And Misdirection
- NIST SP 800-53 Rev. 5 SC-30(2) — Randomness
- NIST SP 800-53 Rev. 5 SC-30(3) — Change Processing And Storage Locations
- NIST SP 800-53 Rev. 5 SC-30(4) — Misleading Information
- NIST SP 800-53 Rev. 5 SC-30(5) — Concealment Of System Components
- NIST SP 800-53 Rev. 5 SC-31 — Covert Channel Analysis
- NIST SP 800-53 Rev. 5 SC-31(1) — Test Covert Channels For Exploitability
- NIST SP 800-53 Rev. 5 SC-31(2) — Maximum Bandwidth
- NIST SP 800-53 Rev. 5 SC-31(3) — Measure Bandwidth In Operational Environments
- NIST SP 800-53 Rev. 5 SC-32 — System Partitioning
- NIST SP 800-53 Rev. 5 SC-32(1) — Separate Physical Domains For Privileged Functions
- NIST SP 800-53 Rev. 5 SC-34 — Non-Modifiable Executable Programs
- NIST SP 800-53 Rev. 5 SC-34(1) — No Writable Storage
- NIST SP 800-53 Rev. 5 SC-34(2) — Integrity Protection And Read-Only Media
- NIST SP 800-53 Rev. 5 SC-35 — External Malicious Code Identification
- NIST SP 800-53 Rev. 5 SC-36 — Distributed Processing And Storage
- NIST SP 800-53 Rev. 5 SC-36(1) — Polling Techniques
- NIST SP 800-53 Rev. 5 SC-36(2) — Synchronization
- NIST SP 800-53 Rev. 5 SC-37 — Out-Of-Band Channels
- NIST SP 800-53 Rev. 5 SC-37(1) — Ensure Delivery And Transmission
- NIST SP 800-53 Rev. 5 SC-38 — Operations Security
- NIST SP 800-53 Rev. 5 SC-39 — Process Isolation
- NIST SP 800-53 Rev. 5 SC-39(1) — Hardware Separation
- NIST SP 800-53 Rev. 5 SC-39(2) — Separate Execution Domain Per Thread
- NIST SP 800-53 Rev. 5 SC-40 — Wireless Link Protection
- NIST SP 800-53 Rev. 5 SC-40(1) — Electromagnetic Interference
- NIST SP 800-53 Rev. 5 SC-40(2) — Reduce Detection Potential
- NIST SP 800-53 Rev. 5 SC-40(3) — Imitative Or Manipulative Communications Deception
- NIST SP 800-53 Rev. 5 SC-40(4) — Signal Parameter Identification
- NIST SP 800-53 Rev. 5 SC-41 — Port And I/O Device Access
- NIST SP 800-53 Rev. 5 SC-42 — Sensor Capability And Data
- NIST SP 800-53 Rev. 5 SC-42(1) — Reporting To Authorized Individuals Or Roles
- NIST SP 800-53 Rev. 5 SC-42(2) — Authorized Use
- NIST SP 800-53 Rev. 5 SC-42(4) — Notice Of Collection
- NIST SP 800-53 Rev. 5 SC-42(5) — Collection Minimization
- NIST SP 800-53 Rev. 5 SC-43 — Usage Restrictions
- NIST SP 800-53 Rev. 5 SC-44 — Detonation Chambers
- NIST SP 800-53 Rev. 5 SC-45 — System Time Synchronization
- NIST SP 800-53 Rev. 5 SC-45(1) — Synchronization With Authoritative Time Source
- NIST SP 800-53 Rev. 5 SC-45(2) — Secondary Authoritative Time Source
- NIST SP 800-53 Rev. 5 SC-46 — Cross Domain Policy Enforcement
- NIST SP 800-53 Rev. 5 SC-47 — Alternate Communications Paths
- NIST SP 800-53 Rev. 5 SC-48 — Sensor Relocation
- NIST SP 800-53 Rev. 5 SC-48(1) — Dynamic Relocation Of Sensors Or Monitoring Capabilities
- NIST SP 800-53 Rev. 5 SC-49 — Hardware-Enforced Separation And Policy Enforcement
- NIST SP 800-53 Rev. 5 SC-50 — Software-Enforced Separation And Policy Enforcement
- NIST SP 800-53 Rev. 5 SC-51 — Hardware-Based Protection