← Back to catalog
AC-6(4)
Separate Processing Domains
Access Control (AC)
Baselines
Low · Not includedModerate · Not includedHigh · Not included
Description
Provide separate processing domains to enable finer-grained allocation of user privileges.
Discussion
Providing separate processing domains for finer-grained allocation of user privileges includes using virtualization techniques to permit additional user privileges within a virtual machine while restricting privileges to other virtual machines or to the underlying physical machine, implementing separate physical domains, and employing hardware or software domain separation mechanisms.
Implementation guidance
No content available.
CSF 2.0 crosswalk
No CSF mappings exist for this control.