System and Communications Protection (SC)

The "SC" family in the Federal Risk and Authorization Management Program addresses safeguards for system and communications protection. It defines security requirements for maintaining the confidentiality, integrity, and availability of data as it moves within and between information systems, including cryptographic controls, boundary protection, and secure transmission protocols. Compliance ensures that federal cloud services implement robust mechanisms to prevent unauthorized access and tampering during data processing and exchange.