ACTIVATE ONLY ESSENTIAL FUNCTIONALITY - 5315.6

Policy: Each state entity shall configure information assets to provide only essential capabilities and functionality, and shall adhere to the principle of least privilege and restrict the use of unnecessary ports, protocols, and/or services to minimize the state entity’s risk.

Implementation Controls:  NIST SP 800-53: Configuration Management (CM)