SC-02.2 · Disassociability

Control Description

Store state information from applications and software separately.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
system
Assurance
Enhancement
Control Statement
The control requirements

Store state information from applications and software separately.

Supplemental Guidance

If a system is compromised, storing applications and software separately from state information about users’ interactions with an application may better protect individuals’ privacy.