Configure systems to provide only essential capabilities by disabling unused services, ports, protocols, and software, and document the rationale for enabled functions within the baseline.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
Other controls in Identifying & Implementing Configurations