← Back to catalog
SC-7(22)
Separate Subnets for Connecting to Different Security Domains
System and Communications Protection (SC)
Baselines
Low · Not includedModerate · Not includedHigh · Not included
Description
Implement separate network addresses to connect to systems in different security domains.
Discussion
The decomposition of systems into subnetworks (i.e., subnets) helps to provide the appropriate level of protection for network connections to different security domains that contain information with different security categories or classification levels.
Implementation guidance
No content available.
CSF 2.0 crosswalk
No CSF mappings exist for this control.