AC-06(04) Separate Processing Domains

Provide separate processing domains to enable finer-grained allocation of user privileges.



Providing separate processing domains for finer-grained allocation of user privileges includes using virtualization techniques to permit additional user privileges within a virtual machine while restricting privileges to other virtual machines or to the underlying physical machine, implementing separate physical domains, and employing hardware or software domain separation mechanisms.

Related controls 6