NIST 800-53 Rev. 5

SC-7(22): Boundary Protection | Separate Subnets for Connecting to Different Security Domains

Control Text:

Implement separate network addresses to connect to systems in different security domains.

The decomposition of systems into subnetworks (i.e., subnets) helps to provide the appropriate level of protection for network connections to different security domains that contain information with different security categories or classification levels.

Related Controls

  • None