SC-39 Process Isolation
Description
Information systems can maintain separate execution domains for each executing process by assigning each process a separate address space.
Each information system process has a distinct address space so that communication between processes is performed in a manner controlled through the security functions, and one process cannot modify the executing code of another process.
Maintaining separate execution domains for executing processes can be achieved, for example, by implementing separate address spaces. This capability is available in most commercial operating systems that employ multistate processor technologies.
Applicability
The owner of an information resource, or designee, is responsible for implementing this Control.
Implementation
TAMU-CC shall use operating systems that support process isolation. The information system maintains a separate execution domain for each executing process.
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019