The university applies the concept of least functionality when providing access to information resources.


  • The intended audience includes information resource owners and custodians; and pertains to information resources considered moderate or high impact.


  • The information resource owner, or designee shall configure the information resource to provide only essential capabilities (i.e. restricting the use of unnecessary ports, protocols, or services).