Our CMMC overview course is available!

SC-2(2)

Requirement

Store state information from applications and software separately.

Discussion

If a system is compromised, storing applications and software separately from state information about users' interactions with an application may better protect individuals' privacy.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing application and software partitioning; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security and privacy responsibilities; system developer].

Test

[SELECT FROM: Separation of application state information from software].

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!