Secure Controls Framework

1,534 controls across 34 domains

Source: SCF 2026.2About SCF
securecontrolsframework.com
Back to catalog
SEA-03.2SEASecure Engineering & Architecture

Application Partitioning

Description

Mechanisms exist to separate user functionality from system management functionality.

Cross-Mappings

149 paths across 4 frameworks
NIST 800-532 mappings
SC-2
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
NIST 800-1711 mapping
3.13.3
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI2 mappings
CCI-001082
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001083
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
STIG141 mappings
SV-203655r1117266_ruleThe operating system must separate user functionality (including user interface services) from operating system management functionality.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · V3R3 · disa_xccdf · related
SV-203655r958514_ruleThe operating system must separate user functionality (including user interface services) from operating system management functionality.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 3 · disa_xccdf · related
SV-204761r1137579_ruleThe application server must separate hosted application functionality from application server management functionality.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · V4R4 · disa_xccdf · related
SV-204761r961095_ruleThe application server must separate hosted application functionality from application server management functionality.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 4 · disa_xccdf · related
SV-205517r1137803_ruleThe Mainframe Product must separate user functionality (including user interface services) from information system management functionality.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · V3R4 · disa_xccdf · related
SV-205517r961095_ruleThe Mainframe Product must separate user functionality (including user interface services) from information system management functionality.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 3 · disa_xccdf · related
SV-206393r1138072_ruleWeb server accounts accessing the directory tree, the shell, or other operating system functions and utilities must only be administrative accounts.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · V4R4 · disa_xccdf · related
SV-206393r961095_ruleWeb server accounts accessing the directory tree, the shell, or other operating system functions and utilities must only be administrative accounts.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 4 · disa_xccdf · related
SV-206394r1138073_ruleAnonymous user access to the web server application directories must be prohibited.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · V4R4 · disa_xccdf · related
SV-206394r961095_ruleAnonymous user access to the web server application directories must be prohibited.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 4 · disa_xccdf · related

+131 more (top 10 by confidence shown)

Control mappings provided by the Secure Controls Framework (SCF).

SCF

Powered by the Secure Controls Framework

The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.

© SCF Council, LLC. Secure Controls Framework content is free and shown here with attribution. securecontrolsframework.com · About SCF on STIGViewer