controlSC-3

Security Function Isolation (SC-3)

Isolate security functions from nonsecurity functions.

Security Baselines

HIGHLOWMODERATE

communicationsencryptionboundary-protectionnetwork

Why These Connect

Baselined In1

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports25

These related controls work together — a change to one may affect the others.

Enhances5

These enhancements add specific capabilities or refinements to the base control.

Related Controls(18)

AC-3Access Enforcement (AC-3)

LMH

AC-25Reference Monitor (AC-25)CM-7Least Functionality (CM-7)

LMH

SA-8Security and Privacy Engineering Principles (SA-8)

LMH

SA-24Design For Cyber Resiliency (SA-24)SC-2Separation of System and User Functionality (SC-2)

AC-6Least Privilege (AC-6)

CM-2Baseline Configuration (CM-2)

LMH

CM-4Impact Analyses (CM-4)

LMH

SA-4Acquisition Process (SA-4)

LMH

SA-5System Documentation (SA-5)

LMH

SA-15Development Process, Standards, and Tools (SA-15)

SA-17Developer Security and Privacy Architecture and Design (SA-17)

SC-7Boundary Protection (SC-7)

LMH

SC-32System Partitioning (SC-32)SC-39Process Isolation (SC-39)

LMH

SI-16Memory Protection (SI-16)

SC-50Software-enforced Separation and Policy Enforcement (SC-50)

Control Enhancements(5)

SC-3(1)Hardware Separation (SC-3(1))

SC-3(2)Access and Flow Control Functions (SC-3(2))

SC-3(3)Minimize Nonsecurity Functionality (SC-3(3))

SC-3(4)Module Coupling and Cohesiveness (SC-3(4))

SC-3(5)Layered Structures (SC-3(5))