Agencies should create a hardened standard operating environment (SOE) for workstations and servers that includes: removing software and operating system components that are not needed; removing or disabling unneeded services, ports and BIOS settings; turning off unused or unwanted functions in software and operating systems; applying access controls to relevant objects so users and programs have only the minimum access they require; installing antivirus and anti-malware software; installing software-based firewalls that restrict inbound and outbound network connections; setting up either remote logging or forwarding event logs held locally to a central server; and protecting audit and other logs with a one way pipe to lower the chance of key transaction records being compromised.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.