SC-36: DISTRIBUTED PROCESSING AND STORAGE
NOT SELECTED FOR INDUSTRIAL CONTROL SYSTEMS
The organization distributes [Assignment: organization-defined processing and storage] across multiple physical locations.
SUPPLEMENTAL GUIDANCE
Distributing processing and storage across multiple physical locations provides some degree of redundancy or overlap for organizations, and therefore increases the work factor of adversaries to adversely impact organizational operations, assets, and individuals. This control does not assume a single primary processing or storage location, and thus allows for parallel processing and storage.
RELATED CONTROLS: SC-36
CONTROL ENHANCEMENTS
SC-36 (1) DISTRIBUTED PROCESSING AND STORAGE | POLLING TECHNIQUES
The organization employs polling techniques to identify potential faults, errors, or compromises to [Assignment: organization-defined distributed processing and storage components].
Supplemental Guidance:
Distributed processing and/or storage may be employed to reduce opportunities for adversaries to successfully compromise the confidentiality, integrity, or availability of information and information systems. However, distribution of processing and/or storage components does not prevent adversaries from compromising one (or more) of the distributed components. Polling compares the processing results and/or storage content from the various distributed components and subsequently voting on the outcomes. Polling identifies potential faults, errors, or compromises in distributed processing and/or storage components.
RELATED CONTROLS: SC-36 (1)
REFERENCES:
- NIST Special Publication 800-82 | GUIDE TO INDUSTRIAL CONTROL SYSTEMS (ICS) SECURITY