| 💼 SC-1 Policy and Procedures (L)(M)(H) | | | | |
| 💼 SC-2 Separation of System and User Functionality (M)(H) | | | | |
| 💼 SC-4 Information in Shared System Resources (M)(H) | | | | |
| 💼 SC-5 Denial-of-service Protection (L)(M)(H) | | | | |
| 💼 SC-7 Boundary Protection (L)(M)(H) | 7 | | 23 | |
| 💼 SC-7(3) Access Points (M)(H) | | | 2 | |
| 💼 SC-7(4) External Telecommunications Services (M)(H) | | | 17 | |
| 💼 SC-7(5) Deny by Default — Allow by Exception (M)(H) | | | 18 | |
| 💼 SC-7(7) Split Tunneling for Remote Devices (M)(H) | | | | |
| 💼 SC-7(8) Route Traffic to Authenticated Proxy Servers (M)(H) | | | | |
| 💼 SC-7(12) Host-based Protection (M)(H) | | | | |
| 💼 SC-7(18) Fail Secure (M)(H) | | | | |
| 💼 SC-8 Transmission Confidentiality and Integrity (L)(M)(H) | 1 | | 8 | |
| 💼 SC-8(1) Cryptographic Protection (L)(M)(H) | | | 10 | |
| 💼 SC-10 Network Disconnect (M)(H) | | | | |
| 💼 SC-12 Cryptographic Key Establishment and Management (L)(M)(H) | | | 11 | |
| 💼 SC-13 Cryptographic Protection (L)(M)(H) | | | 16 | |
| 💼 SC-15 Collaborative Computing Devices and Applications (L)(M)(H) | | | | |
| 💼 SC-17 Public Key Infrastructure Certificates (M)(H) | | | 1 | |
| 💼 SC-18 Mobile Code (M)(H) | | | | |
| 💼 SC-20 Secure Name/Address Resolution Service (Authoritative Source) (L)(M)(H) | | | | |
| 💼 SC-21 Secure Name/Address Resolution Service (Recursive or Caching Resolver) (L)(M)(H) | | | | |
| 💼 SC-22 Architecture and Provisioning for Name/Address Resolution Service (L)(M)(H) | | | | |
| 💼 SC-23 Session Authenticity (M)(H) | | | 7 | |
| 💼 SC-28 Protection of Information at Rest (L)(M)(H) | 1 | | 15 | |
| 💼 SC-28(1) Cryptographic Protection (L)(M)(H) | | | 12 | |
| 💼 SC-39 Process Isolation (L)(M)(H) | | | | |
| 💼 SC-45 System Time Synchronization (M)(H) | 1 | | | |
| 💼 SC-45(1) Synchronization with Authoritative Time Source (M)(H) | | | | |