System and Communications Protection (SC)
The System and Communications Protection family has 47 active controls in SP 800-53 release 5.2.0. “Yes” marks membership in the SP 800-53B baselines.
| Control | Title | Low | Moderate | High | Privacy |
|---|---|---|---|---|---|
| SC-1 | Policy and Procedures | Yes | Yes | Yes | |
| SC-2 | Separation of System and User Functionality | Yes | Yes | ||
| SC-3 | Security Function Isolation | Yes | |||
| SC-4 | Information in Shared System Resources | Yes | Yes | ||
| SC-5 | Denial-of-service Protection | Yes | Yes | Yes | |
| SC-6 | Resource Availability | ||||
| SC-7 | Boundary Protection | Yes | Yes | Yes | |
| SC-8 | Transmission Confidentiality and Integrity | Yes | Yes | ||
| SC-10 | Network Disconnect | Yes | Yes | ||
| SC-11 | Trusted Path | ||||
| SC-12 | Cryptographic Key Establishment and Management | Yes | Yes | Yes | |
| SC-13 | Cryptographic Protection | Yes | Yes | Yes | |
| SC-15 | Collaborative Computing Devices and Applications | Yes | Yes | Yes | |
| SC-16 | Transmission of Security and Privacy Attributes | ||||
| SC-17 | Public Key Infrastructure Certificates | Yes | Yes | ||
| SC-18 | Mobile Code | Yes | Yes | ||
| SC-20 | Secure Name/Address Resolution Service (Authoritative Source) | Yes | Yes | Yes | |
| SC-21 | Secure Name/Address Resolution Service (Recursive or Caching Resolver) | Yes | Yes | Yes | |
| SC-22 | Architecture and Provisioning for Name/Address Resolution Service | Yes | Yes | Yes | |
| SC-23 | Session Authenticity | Yes | Yes | ||
| SC-24 | Fail in Known State | Yes | |||
| SC-25 | Thin Nodes | ||||
| SC-26 | Decoys | ||||
| SC-27 | Platform-independent Applications | ||||
| SC-28 | Protection of Information at Rest | Yes | Yes | ||
| SC-29 | Heterogeneity | ||||
| SC-30 | Concealment and Misdirection | ||||
| SC-31 | Covert Channel Analysis | ||||
| SC-32 | System Partitioning | ||||
| SC-34 | Non-modifiable Executable Programs | ||||
| SC-35 | External Malicious Code Identification | ||||
| SC-36 | Distributed Processing and Storage | ||||
| SC-37 | Out-of-band Channels | ||||
| SC-38 | Operations Security | ||||
| SC-39 | Process Isolation | Yes | Yes | Yes | |
| SC-40 | Wireless Link Protection | ||||
| SC-41 | Port and I/O Device Access | ||||
| SC-42 | Sensor Capability and Data | ||||
| SC-43 | Usage Restrictions | ||||
| SC-44 | Detonation Chambers | ||||
| SC-45 | System Time Synchronization | ||||
| SC-46 | Cross Domain Policy Enforcement | ||||
| SC-47 | Alternate Communications Paths | ||||
| SC-48 | Sensor Relocation | ||||
| SC-49 | Hardware-enforced Separation and Policy Enforcement | ||||
| SC-50 | Software-enforced Separation and Policy Enforcement | ||||
| SC-51 | Hardware-based Protection |
Withdrawn controls: SC-9, SC-14, SC-19, SC-33.
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.