SC.L2-3.13.4
Shared Resource Control
Source and approval
CMMC Assessment Guide — Level 2 · Revision 2.13
Publisher approved · Complete cited source edition 2026-10-31
Read the official guideSee SC.L2-3.13.4 in the reference catalog with its NIST cross-references
Official requirement
Prevent unauthorized and unintended information transfer via shared system resources.
Assessment objectives
a. unauthorized and unintended information transfer via shared system resources is prevented.
Implementation guidance
Editorial examples to help you plan. Adapt them to your environment; the official requirement and objectives remain authoritative.
In plain language
Prevent unintended information transfer through shared system resources.
Implementation example
Example from the source assessment guide (not a mandatory implementation): You are a system administrator responsible for creating and deploying the system hardening procedures for your company’s computers. You ensure that the computer baselines include software patches to prevent attackers from exploiting flaws in the processor architecture to read data (e.g., the Meltdown and Spectre exploits). You also verify that the computer operating system is configured to prevent users from accessing other users’ folders [a].
Evidence examples
Examples suggested by the source guide (not an exhaustive or mandatory checklist): System and communications protection policy; procedures addressing application partitioning; system security plan; system design documentation; system configuration settings and associated documentation; system audit logs and records; other relevant documents or records
Common mistakes
Checking file permissions while overlooking residual data in reused shared resources.