# SC-7(22) — Separate Subnets for Connecting to Different Security Domains

- **Control ID:** SC-7(22)
- **Family:** [SC](/md/families/SC.md)
- **Baselines:** No content available.
- **Enhancement of:** [SC-7](/md/controls/SC-7.md)

## Description

Implement separate network addresses to connect to systems in different security domains.

## Discussion

The decomposition of systems into subnetworks (i.e., subnets) helps to provide the appropriate level of protection for network connections to different security domains that contain information with different security categories or classification levels.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

No content available.

## Related controls

No content available.

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.