CCI-002506

Partition the system into organization-defined system components residing in separate physical or logical domains or environments based on organization-defined circumstances for physical or logical separation of components.

Implementation Guidance

The organization being inspected/assessed designs the information system to partition components defined in SC-32, CCI 2504 residing in separate physical domains or environments based on circumstances defined in SC-32, CCI 2505 for physical separation of components.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines network topology diagrams, architecture documentation, or any other documentation identifying component partitioning to ensure the organization being inspected/assessed partitions components defined in SC-32, CCI 2504 residing in separate physical domains or environments based on circumstances defined in SC-32, CCI 2505 for physical separation of components.

Compelling Evidence

1.) Network topology diagrams. 2.) Signed and dated architecture documentation or any other relevant documentation.

The controls below (if any) were marked by NIST as being related to CCI-002506.