SC-49 HARDWARE-ENFORCED SEPARATION AND POLICY ENFORCEMENT

Control: Implement hardware-enforced separation and policy enforcement mechanisms between [ Assignment: organization-defined security domains ].

Discussion: System owners may require additional strength of mechanism and robustness to ensure domain separation and policy enforcement for specific types of threats and environments of operation. Hardware-enforced separation and policy enforcement provide greater strength of mechanism than software-enforced separation and policy enforcement.

Related Controls: AC-4 , SA-8 , SC-50.

Control Enhancements: None.

References: [SP 800-160-1].