SC-7(18)

Fail Secure

System and Communications Protection (SC)

Baselines

Low · Not includedModerate · Not includedHigh · Included

Description

Prevent systems from entering unsecure states in the event of an operational failure of a boundary protection device.

Discussion

Fail secure is a condition achieved by employing mechanisms to ensure that in the event of operational failures of boundary protection devices at managed interfaces, systems do not enter into unsecure states where intended security properties no longer hold. Managed interfaces include routers, firewalls, and application gateways that reside on protected subnetworks (commonly referred to as demilitarized zones). Failures of boundary protection devices cannot lead to or cause information external to the devices to enter the devices nor can failures permit unauthorized information releases.

Implementation guidance

No content available.

CSF 2.0 crosswalk

No CSF mappings exist for this control.