CCI-000387

Implementation Guidance

Determine if [CM-07(03)_ODP; registration requirements for functions, ports, protocols, and services are defined] are complied with.

Validation Procedures

Examine: [SELECT FROM: System security plan; configuration management policy; procedures addressing least functionality in the system; configuration management plan; system configuration settings and associated documentation; system component inventory; audit and compliance reviews; system audit records; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with security responsibilities; system/network administrators; system developers]. Test: [SELECT FROM: Organizational processes ensuring compliance with registration requirements for functions, ports, protocols, and/or services; mechanisms implementing compliance with registration requirements for functions, ports, protocols, and/or services].