BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SC-07(21) Isolation of System Components

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged SC High baseline part of SC-7

Title

Isolation of System Components

Control

Employ boundary protection mechanisms to isolate [Assignment: system components] supporting [Assignment: missions and/or business functions].

Discussion

Organizations can isolate system components that perform different mission or business functions. Such isolation limits unauthorized information flows among system components and provides the opportunity to deploy greater levels of protection for selected system components. Isolating system components with boundary protection mechanisms provides the capability for increased protection of individual system components and to more effectively control information flows between those components. Isolating system components provides enhanced protection that limits the potential harm from hostile cyber-attacks and errors. The degree of isolation varies depending upon the mechanisms chosen. Boundary protection mechanisms include routers, gateways, and firewalls that separate system components into physically separate networks or subnetworks; cross-domain devices that separate subnetworks; virtualization techniques; and the encryption of information flows among system components using distinct encryption keys.

Parameters

sc-07.21_odp.01: system components
sc-07.21_odp.02: missions and/or business functions

Related controls

ca-9

Assessment objective

SC-07(21) boundary protection mechanisms are employed to isolate [Assignment: system components] supporting [Assignment: missions and/or business functions].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).