3.4.7
3.4.7
Restrict, disable, or prevent the use of nonessential programs, functions, ports, protocols, and services.
-
5.4.3.1 (a) The organization shall implement secure configurations for all their devices unless it is impossible to do so on a specific device:
a) by turning off unnecessary features i.e., block unused ports, disable unused services, remove unused or obsolete software; and
b) by enabling all relevant security features.