NIST 800-53 r5 · Controls catalogue · Family SC

SC-50Software-enforced Separation and Policy Enforcement

Implement software-enforced separation and policy enforcement mechanisms between {{ insert: param, sc-50_odp }}.

Last updated: 22 August 2026 07:11 UTC

Implementations targeting this control (0)

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

CWE	Name	CVEs	Why this control addresses it
`CWE-862`	Missing Authorization	10,200+	Requires explicit authorization checks as part of the enforced policy between separated components.
`CWE-284`	Improper Access Control	6,900+	Directly implements software-enforced boundaries that prevent unauthorized access across separated components or domains.
`CWE-863`	Incorrect Authorization	3,900+	Policy enforcement mechanisms correct or prevent flawed authorization logic across domain boundaries.
`CWE-269`	Improper Privilege Management	3,400+	Policy enforcement mechanisms limit privilege escalation and improper privilege assignments across boundaries.
`CWE-732`	Incorrect Permission Assignment for Critical Resource	1,900+	Software-enforced separation ensures correct permission assignments on critical resources between domains.
`CWE-285`	Improper Authorization	1,500+	Enforces policy-based authorization decisions between the separated subjects and objects.
`CWE-250`	Execution with Unnecessary Privileges	300+	Separation and policy enforcement reduce the ability to execute with unnecessary privileges by isolating higher-privilege functions.
`CWE-653`	Improper Isolation or Compartmentalization	73	Explicitly requires isolation and compartmentalization mechanisms that address failures in separating security domains.

CVE	Risk	CVSS	EPSS	Match
`CVE-2023-42667`	5.4	7.8	0.0024	good
`CVE-2023-49141`	5.4	7.8	0.0029	good
`CVE-2023-31325`	4.9	7.2	0.0014	good
`CVE-2025-54514`	3.5	4.8	0.0010	good
`CVE-2024-36332`	3.5	6.8	0.0010	good