SC-39(1)

Requirement

Implement hardware separation mechanisms to facilitate process isolation.

Discussion

Hardware-based separation of system processes is generally less susceptible to compromise than software-based separation, thus providing greater assurance that the separation will be enforced. Hardware separation mechanisms include hardware memory management.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; system design documentation; system configuration settings and associated documentation; system architecture; system documentation for hardware separation mechanisms; system documentation from vendors, manufacturers, or developers; independent verification and validation documentation; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel installing, configuring, and/or maintaining the system; system developers/integrators].

Test

[SELECT FROM: System capability implementing underlying hardware separation mechanisms for process separation].

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!