ComplianceNIST 800-53 enhancement
NIST-AC-6(4) Separate Processing Domains
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- AC Access Control
- Control
- AC-6(4)
Control statement
Provide separate processing domains to enable finer-grained allocation of user privileges.
Discussion
Providing separate processing domains for finer-grained allocation of user privileges includes using virtualization techniques to permit additional user privileges within a virtual machine while restricting privileges to other virtual machines or to the underlying physical machine, implementing separate physical domains, and employing hardware or software domain separation mechanisms.
Related
Enhancement of · Compliance (1)
- NIST-AC-6 Least Privilege NIST 800-53 control
Related control · Compliance (6)
- NIST-AC-4 Information Flow Enforcement NIST 800-53 control
- NIST-SC-2 Separation of System and User Functionality NIST 800-53 control
- NIST-SC-3 Security Function Isolation NIST 800-53 control
- NIST-SC-30 Concealment and Misdirection NIST 800-53 control
- NIST-SC-32 System Partitioning NIST 800-53 control
- NIST-SC-39 Process Isolation NIST 800-53 control