+SYS.2.1.A16 Disabling and Removing Unnecessary Components and IDs (S)

SYS.2.1.A16 Disabling and Removing Unnecessary Components and IDs (S)

Firmware and operating system components, applications, and other tools that are installed and activated on clients SHOULD be checked after installation. Unnecessary modules, programs, services, tasks, and firmware functions (like remote maintenance) SHOULD be disabled or removed. Unnecessary runtime environments, interpreter languages, and compilers should also be removed. Unnecessary user IDs SHOULD be disabled or deleted. Unnecessary interfaces and IT system hardware (like webcams) SHOULD be disabled. The reactivation of these components SHOULD be prevented. The decisions taken in this regard SHOULD be documented in a comprehensible manner.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.40 Denial of Service
blocks G 0.45 Data Loss