2.2.3System components are configured and managed securely

Defined Approach Requirements:

Primary functions requiring different security levels are managed as follows:

- Only one primary function exists on a system component, or

- Primary functions with differing security levels that exist on the same system component are isolated from each other, or

- Primary functions with differing security levels on the same system component are all secured to the level required by the function with the highest security need.

Defined Approach Testing Procedures:

2.2.3.a Examine system configuration standards to verify they include managing primary functions requiring different security levels as specified in this requirement.

2.2.3.b Examine system configurations to verify that primary functions requiring different security levels are managed per one of the ways specified in this requirement.

2.2.3.c Where virtualization technologies are used, examine the system configurations to verify that system functions requiring different security levels are managed in one of the following ways:

- Functions with differing security needs to not co-exist on the same system component.

- Functions with differing security needs that exist on the same system component are isolated from each other.

- Functions with differing security needs on the same system component are all secured to the level required by the function with the highest security need.