5.4.2.1
Securely Configure Devices
The organization shall implement secure configurations for all their devices by:
- a. changing all default passwords;
- b. by turning off unnecessary features i.e., block unused ports, disable unused services, remove unused or obsolete software; and
- c. by enabling all relevant security features.
-
5.37 Documented Operating Procedures: Document and provide operating procedures for information processing facilities to relevant personnel.
7.13 Equipment Maintenance: Maintain equipment properly to ensure the availability, integrity, and confidentiality of information.
8.1 User Endpoint Devices: Protect information stored, processed, or accessible through user endpoint devices.
8.9 Configuration Management: Establish, document, implement, monitor, and review configurations, including security configurations, of hardware, software, services, and networks.
-
3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems.
3.7.1 Perform maintenance on organizational systems.
3.7.2 Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance.
-
3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems.
3.7.1 Perform maintenance on organizational systems.
3.7.2 Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance.