Failure to meet the least functionality requirements listed below could allow any user to perform other functions without restrictions or, possibly, could allow any attacker to gain unauthorized access to the system or the data in the system: (i) the organization defines the frequency of information system reviews to identify and eliminate unnecessary: Least Functionality [Test: CM-7(1).1 - functions; [E-# OR [NIST 800-53 w/ [Test: CM-7(1).1 - Periodic Review] High W-#] DHS 4300A CM-7 Periodic Review] ports; (1)] Not Entered protocols; and/or Not Entered services; and (ii) the organization reviews the information system in accordance with frequency to identify and eliminate unnecessary: functions; ports; protocols; and/or services.
[E-# OR W-#] Least Functionality [NIST 800-53 w/ DHS 4300A CM-7 (1)] [Test: CM-7(1).1 - Periodic Review] Not Entered Failure to meet the least functionality requirements listed below could allow any user to perform other functions without restrictions or, possibly, could allow any attacker to gain unauthorized access to the system or the data in the system: (i) the organization defines the frequency of information system reviews to identify and eliminate unnecessary: functions; ports; protocols; and/or services; and (ii) the organization reviews the information system in accordance with frequency to identify and eliminate unnecessary: functions; ports; protocols; and/or services. High [Test: CM-7(1).1 - Periodic Review] Not Entered
Security%20Assessment%20Report%20Extensible.docx