ComplianceNIST 800-53 enhancement

NIST-SC-2(2) Disassociability

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SC System and Communications Protection
Control
SC-2(2)

Control statement

Store state information from applications and software separately.

Discussion

If a system is compromised, storing applications and software separately from state information about users’ interactions with an application may better protect individuals’ privacy.

Related

Enhancement of · Compliance (1)

  • NIST-SC-2 Separation of System and User Functionality NIST 800-53 control