CCI-001762

Disable or remove organization-defined functions, ports, protocols, software, and services within the system deemed to be unnecessary and/or nonsecure.

Implementation Guidance

The organization being inspected/assessed must disable functions, ports, protocols, and services within the information system deemed to be unnecessary and/or nonsecure as defined in CM-7 (1), CCI 1761.

Validation Procedures

The organization conducting the inspection/assessment inspects the information system to ensure the organization being inspected/assessed disables functions, ports, protocols, and services within the information system deemed to be unnecessary and/or nonsecure as defined in CM-7 (1), CCI 1761.

Compelling Evidence

1.) Approved ports, protocols, and/or services list 2.) Audit trail of ports, protocols, and/or services scan and/or review

The controls below (if any) were marked by NIST as being related to CCI-001762.