SC-49 Hardware-enforced Separation and Policy Enforcement

System and Communications Protection

New in Rev 5

Description

Implement hardware-enforced separation and policy enforcement mechanisms between [Assignment: organization-defined parameters].

Supplemental Guidance

System owners may require additional strength of mechanism and robustness to ensure domain separation and policy enforcement for specific types of threats and environments of operation. Hardware-enforced separation and policy enforcement provide greater strength of mechanism than software-enforced separation and policy enforcement.

Changes from Rev 4

New control in Rev 5.

Compliance Mappings

RBI CSF

Annex1.4

HKMA TM-E-1

TME1.7.3