Navigate

SC-7 (22)

SC-7 (22): Separate Subnets For Connecting To Different Security Domains

The information system implements separate network addresses (i.e., different subnets) to connect to systems in different security domains.

Supplemental

Decomposition of information systems into subnets helps to provide the appropriate level of protection for network connections to different security domains containing information with different security categories or classification levels.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Cross Domain (Access), Cross Domain (Multilevel), Cross Domain (Transfer), NC3

Related Controls

The controls below (if any) were marked by NIST as being related to SC-7 (22).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of SC-7 (22).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SC-7 (22).

CCI	Definition
CCI-002416	The information system implements separate network addresses (i.e., different subnets) to connect to systems in different security domains.