Skip to main content

💼 CM-7(1) Periodic Review (M)(H)

  • ID: /frameworks/fedramp-high-security-controls/cm/07/01

Stats​

not available

Description​

(a) Review the system [FedRAMP Assignment: at least annually] to identify unnecessary and/or nonsecure functions, ports, protocols, software, and services; and

(b) Disable or remove [Assignment: organization-defined functions, ports, protocols, software, and services within the system deemed to be unnecessary and/or nonsecure].

Similar​

  • Sections
    • /frameworks/nist-sp-800-53-r5/cm/07/01
  • Internal
    • ID: dec-c-3a09261c

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST SP 800-53 Revision 5 → 💼 CM-7(1) Least Functionality _ Periodic Review33no data

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 FedRAMP Moderate Security Controls → 💼 CM-7(1) Periodic Review (M)(H)19no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (19)​

PolicyLogic CountFlagsCompliance
🛡️ AWS CloudFront Web Distribution uses outdated SSL protocols with Custom Origins🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows public IPv4 (0.0.0.0/0) access to admin ports🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows public IPv6 (::/0) access to admin ports🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted CIFS traffic🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted DNS traffic🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted FTP traffic🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted ICMP traffic🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted NetBIOS traffic🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted RPC traffic🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted SMTP traffic🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted traffic to MSSQL🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted traffic to MySQL🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted traffic to PostgreSQL🟢1🟢 x6no data
🛡️ AWS EC2 Security Group allows unrestricted Telnet traffic🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted RDP traffic🟢1🟢 x6no data
🛡️ Google GCE Network allows unrestricted SSH traffic🟢1🟢 x6no data
🛡️ Oracle IAM Auth Tokens are not rotated every 90 days🟢1🟢 x6no data
🛡️ Oracle IAM Customer Secret Keys are not rotated every 90 days🟢1🟢 x6no data
🛡️ Oracle IAM Domain Password Policy has weak complexity requirements🟢1🟢 x6no data

Internal Rules​

RulePoliciesFlags
✉️ dec-x-3e379c671
✉️ dec-x-05aeca9a1
✉️ dec-x-5dc6b82a1
✉️ dec-x-6eab9b881
✉️ dec-x-7dd32fc82
✉️ dec-x-11c3009f1
✉️ dec-x-14c7e63c1
✉️ dec-x-42a090841
✉️ dec-x-293ab45b1
✉️ dec-x-708db3f81
✉️ dec-x-892f536e1
✉️ dec-x-4002ecfe1
✉️ dec-x-66358b451
✉️ dec-x-a960c3461
✉️ dec-x-b43542b52
✉️ dec-x-bcae85fb2
✉️ dec-x-ca1c0c0d1
✉️ dec-x-f12d78aa1