CM-7: Least Functionality

NIST Baseline:  Low 

DIR Required By:  07/20/2023 

Review Date:  06/26/2024 

The information resource owner, or designee, shall configure the information resource to provide only essential capabilities for business needs (i.e. restricting the use of unnecessary ports, protocols, or services). 

---

References/Additional Resources

None.  See any applicable internal procedures.