CyberStrikeus/CyberStrike - Page 139

sc-31-covert-channel-analysis

Perform a covert channel analysis to identify those aspects of communications within the system that are potential avenues for covert [organization...

sc-32-1-separate-physical-domains-for-privileged-functions

Partition privileged functions into separate physical domains.

sc-32-system-partitioning

Partition the system into [organization-defined] residing in separate [organization-defined] domains or environments based on [organization-defined].

sc-33-transmission-preparation-integrity

Transmission Preparation Integrity

sc-34-1-no-writable-storage

Employ [organization-defined] with no writeable storage that is persistent across component restart or power on/off.

sc-34-2-integrity-protection-on-read-only-media

Protect the integrity of information prior to storage on read-only media and control the media after such information has been recorded onto the media

sc-34-3-hardware-based-protection

Hardware-based Protection

sc-34-non-modifiable-executable-programs

For [organization-defined] , load and execute: The operating environment from hardware-enforced, read-only media; and The following applications from

sc-35-external-malicious-code-identification

Include system components that proactively seek to identify network-based malicious code or malicious websites.

sc-36-1-polling-techniques

Employ polling techniques to identify potential faults, errors, or compromises to the following processing and storage components: [organization-de...

sc-36-2-synchronization

Synchronize the following duplicate systems or system components: [organization-defined].

sc-36-distributed-processing-and-storage

Distribute the following processing and storage components across multiple [organization-defined]: [organization-defined].

sc-37-1-ensure-delivery-and-transmission

Employ [organization-defined] to ensure that only [organization-defined] receive the following information, system components, or devices: [organizati

sc-37-out-of-band-channels

Employ the following out-of-band channels for the physical delivery or electronic transmission of [organization-defined] to [organization-defined]: [o

sc-38-operations-security

Employ the following operations security controls to protect key organizational information throughout the system development life cycle: [organizatio

sc-39-1-hardware-separation

Implement hardware separation mechanisms to facilitate process isolation.

sc-39-2-separate-execution-domain-per-thread

Maintain a separate execution domain for each thread in [organization-defined].

sc-39-process-isolation

Maintain a separate execution domain for each executing system process.

sc-4-1-security-levels

Security Levels

sc-4-2-multilevel-or-periods-processing

Prevent unauthorized information transfer via shared resources in accordance with [organization-defined] when system processing explicitly switches be

sc-4-information-in-shared-system-resources

Prevent unauthorized and unintended information transfer via shared system resources.

sc-40-1-electromagnetic-interference

Implement cryptographic mechanisms that achieve [organization-defined] against the effects of intentional electromagnetic interference.

sc-40-2-reduce-detection-potential

Implement cryptographic mechanisms to reduce the detection potential of wireless links to [organization-defined].

sc-40-3-imitative-or-manipulative-communications-deception

Implement cryptographic mechanisms to identify and reject wireless transmissions that are deliberate attempts to achieve imitative or manipulative com

sc-40-4-signal-parameter-identification

Implement cryptographic mechanisms to prevent the identification of [organization-defined] by using the transmitter signal parameters.

sc-40-wireless-link-protection

Protect external and internal [organization-defined] from the following signal parameter attacks: [organization-defined].

sc-41-port-and-io-device-access

[organization-defined] disable or remove [organization-defined] on the following systems or system components: [organization-defined].

sc-42-1-reporting-to-authorized-individuals-or-roles

Verify that the system is configured so that data or information collected by the [organization-defined] is only reported to authorized individuals or

sc-42-2-authorized-use

Employ the following measures so that data or information collected by [organization-defined] is only used for authorized purposes: [organization-defi

sc-42-3-prohibit-use-of-devices

Prohibit Use of Devices

sc-42-4-notice-of-collection

Employ the following measures to facilitate an individual’s awareness that personally identifiable information is being collected by [organization-def

sc-42-5-collection-minimization

Employ [organization-defined] that are configured to minimize the collection of information about individuals that is not needed.

sc-42-sensor-capability-and-data

Prohibit [organization-defined] ;

sc-43-usage-restrictions

Establish usage restrictions and implementation guidelines for the following system components: [organization-defined] ;

sc-44-detonation-chambers

Employ a detonation chamber capability within [organization-defined].

sc-45-1-synchronization-with-authoritative-time-source

Compare the internal system clocks [organization-defined] with [organization-defined] ;

sc-45-2-secondary-authoritative-time-source

Identify a secondary authoritative time source that is in a different geographic region than the primary authoritative time source;

sc-45-system-time-synchronization

Synchronize system clocks within and between systems and system components.

sc-46-cross-domain-policy-enforcement

Implement a policy enforcement mechanism [organization-defined] between the physical and/or network interfaces for the connecting security domains.

sc-47-alternate-communications-paths

Establish [organization-defined] for system operations organizational command and control.