SC-07(13) Isolation of Security Tools, Mechanisms, and Support Components
All changes in this version
Title
Isolation of Security Tools, Mechanisms, and Support Components
Control
Isolate [Assignment: information security tools, mechanisms, and support components] from other internal system components by implementing physically separate subnetworks with managed interfaces to other components of the system.
Discussion
Physically separate subnetworks with managed interfaces are useful in isolating computer network defenses from critical operational processing networks to prevent adversaries from discovering the analysis and forensics techniques employed by organizations.
Parameters
sc-07.13_odp: information security tools, mechanisms, and support components
Related controls
sc-2, sc-3
Assessment objective
SC-07(13) [Assignment: information security tools, mechanisms, and support components] are isolated from other internal system components by implementing physically separate subnetworks with managed interfaces to other components of the system.
STIG rules that implement this control 1
Application Security and Development V6R5
- APSC-DV-003350 CAT II Connections between the DoW enclave and the Internet or other public or commercial wide area networks must require a DMZ.