Compliance
NIST 800-53 SC-39 Process Isolation: What to Show an Auditor
SC-39 asks for a separate execution domain for each running process. Learn how sandboxing, containers and virtual machines count as evidence.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
NIST 800-53 SC-38 Operations Security (OPSEC) Explained
SC-38 protects key information about your plans and systems through the development life cycle. Evidence and a practical OPSEC process.
Oct 18, 20266 min read
Compliance
NIST 800-53 SC-37 Out of Band Channels: What to Show
SC-37 asks for out of band channels to deliver sensitive items such as keys or tokens. See practical examples and evidence.
Oct 18, 20262 min read
Compliance
NIST 800-53 SC-36 Distributed Processing and Storage
SC-36 asks you to spread chosen processing and storage across locations or domains. See evidence, gaps and practical steps.
Oct 18, 20262 min read
Compliance
NIST 800-53 SC-35 External Malicious Code Identification
SC-35 calls for components that actively seek malicious code and sites. See how it differs from decoys and what evidence fits.
Oct 18, 20262 min read
Compliance
NIST 800-53 SC-34 Non-modifiable Executable Programs
SC-34 loads the operating environment and chosen apps from read only media. See modern equivalents and evidence.
Oct 18, 20264 min read
Compliance
NIST 800-53 SC-33 Transmission Preparation Integrity: Now in SC-8
SC-33 was withdrawn and merged into SC-8. Learn what that means and how to evidence integrity of data before it leaves your systems.
Oct 18, 20262 min read
Compliance
NIST 800-53 SC-32 System Partitioning: Segmenting Your Environment
SC-32 splits a system into components in separate domains based on security needs. Evidence, gaps and a segmentation plan.
Oct 18, 20265 min read
Compliance
NIST 800-53 SC-31 Covert Channel Analysis in Practice
SC-31 asks developers to find covert communication paths and estimate their bandwidth. Who needs it and how to show it.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.