Description

The university applies the concept of least functionality when providing access to information resources.

Applicability

  • The intended audience includes information resource owners and custodians; and pertains to information resources considered moderate or high impact.

Implementation

  • The information resource owner, or designee shall configure the information resource to provide only essential capabilities (i.e. restricting the use of unnecessary ports, protocols, or services).