# SC-3(2) — Access and Flow Control Functions

- **Control ID:** SC-3(2)
- **Family:** [SC](/md/families/SC.md)
- **Baselines:** No content available.
- **Enhancement of:** [SC-3](/md/controls/SC-3.md)

## Description

Isolate security functions enforcing access and information flow control from nonsecurity functions and from other security functions.

## Discussion

Security function isolation occurs because of implementation. The functions can still be scanned and monitored. Security functions that are potentially isolated from access and flow control enforcement functions include auditing, intrusion detection, and malicious code protection functions.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

No content available.

## Related controls

No content available.

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.