| Reference | Family | Title |
|---|---|---|
| SC-3(2) | System and Communications Protection | Access and Flow Control Functions |
| SC-3(3) | System and Communications Protection | Minimize Nonsecurity Functionality |
| SC-3(4) | System and Communications Protection | Module Coupling and Cohesiveness |
| SC-3(5) | System and Communications Protection | Layered Structures |
| SC-30 | System and Communications Protection | Concealment and Misdirection |
| SC-30(1) | System and Communications Protection | Virtualization Techniques |
| SC-30(2) | System and Communications Protection | Randomness |
| SC-30(3) | System and Communications Protection | Change Processing and Storage Locations |
| SC-30(4) | System and Communications Protection | Misleading Information |
| SC-30(5) | System and Communications Protection | Concealment of System Components |
| SC-31 | System and Communications Protection | Covert Channel Analysis |
| SC-31(1) | System and Communications Protection | Test Covert Channels for Exploitability |
| SC-31(2) | System and Communications Protection | Maximum Bandwidth |
| SC-31(3) | System and Communications Protection | Measure Bandwidth in Operational Environments |
| SC-32 | System and Communications Protection | System Partitioning |
| SC-32(1) | System and Communications Protection | Separate Physical Domains for Privileged Functions |
| SC-33 | System and Communications Protection | Transmission Preparation Integrity |
| SC-34 | System and Communications Protection | Non-modifiable Executable Programs |
| SC-34(1) | System and Communications Protection | No Writable Storage |
| SC-34(2) | System and Communications Protection | Integrity Protection on Read-only Media |
| SC-34(3) | System and Communications Protection | Hardware-based Protection |
| SC-35 | System and Communications Protection | External Malicious Code Identification |
| SC-36 | System and Communications Protection | Distributed Processing and Storage |
| SC-36(1) | System and Communications Protection | Polling Techniques |
| SC-36(2) | System and Communications Protection | Synchronization |
| SC-37 | System and Communications Protection | Out-of-band Channels |
| SC-37(1) | System and Communications Protection | Ensure Delivery and Transmission |
| SC-38 | System and Communications Protection | Operations Security |
| SC-39 | System and Communications Protection | Process Isolation |
| SC-39(1) | System and Communications Protection | Hardware Separation |
| SC-39(2) | System and Communications Protection | Separate Execution Domain Per Thread |
| SC-4 | System and Communications Protection | Information in Shared System Resources |
| SC-4(1) | System and Communications Protection | Security Levels |
| SC-4(2) | System and Communications Protection | Multilevel or Periods Processing |
| SC-40 | System and Communications Protection | Wireless Link Protection |
| SC-40(1) | System and Communications Protection | Electromagnetic Interference |
| SC-40(2) | System and Communications Protection | Reduce Detection Potential |
| SC-40(3) | System and Communications Protection | Imitative or Manipulative Communications Deception |
| SC-40(4) | System and Communications Protection | Signal Parameter Identification |
| SC-41 | System and Communications Protection | Port and I/O Device Access |
| SC-42 | System and Communications Protection | Sensor Capability and Data |
| SC-42(1) | System and Communications Protection | Reporting to Authorized Individuals or Roles |
| SC-42(2) | System and Communications Protection | Authorized Use |
| SC-42(3) | System and Communications Protection | Prohibit Use of Devices |
| SC-42(4) | System and Communications Protection | Notice of Collection |
| SC-42(5) | System and Communications Protection | Collection Minimization |
| SC-43 | System and Communications Protection | Usage Restrictions |
| SC-44 | System and Communications Protection | Detonation Chambers |
| SC-45 | System and Communications Protection | System Time Synchronization |
| SC-45(1) | System and Communications Protection | Synchronization with Authoritative Time Source |
Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.