💼 CM-7(1) Least Functionality | Periodic Review

• ID: /frameworks/nist-sp-800-53-r5/cm/07/01

Stats

not available

Description

(a) Review the system [Assignment: organization-defined frequency] to identify unnecessary and/or nonsecure functions, ports, protocols, software, and services; and (b) Disable or remove [Assignment: organization-defined functions, ports, protocols, software, and services within the system deemed to be unnecessary and/or nonsecure].

Similar

• Internal
  • ID: dec-c-c24ab01a

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 FedRAMP High Security Controls → 💼 CM-7(1) Periodic Review (M)(H)		18	19		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (3)

Policy	Logic Count	Flags	Compliance
🛡️ Oracle IAM Auth Tokens are not rotated every 90 days🟢	1	🟢 x6	no data
🛡️ Oracle IAM Customer Secret Keys are not rotated every 90 days🟢	1	🟢 x6	no data
🛡️ Oracle IAM Domain Password Policy has weak complexity requirements🟢	1	🟢 x6	no data

Internal Rules

Rule	Policies	Flags
✉️ dec-x-2e85e7c5	1
✉️ dec-x-2e229fb4	1
✉️ dec-x-087d4ffc	1