Skip to main content

CM-7 Least Functionality

Description​

The university applies the concept of least functionality when providing access to information resources.

Applicability​

  • The intended audience includes information resource owners and custodians; and pertains to information resources considered moderate or high impact.

Implementation​

  • 1 - The information resource owner, or designee shall configure the information resource to provide only essential capabilities (i.e. restricting the use of unnecessary ports, protocols, or services).