2.2.4System components are configured and managed securely

Defined Approach Requirements:

Only necessary services, protocols, daemons, and functions are enabled, and all unnecessary functionality is removed or disabled.

Defined Approach Testing Procedures:

2.2.4.a Examine system configuration standards to verify that necessary system services, protocols, and daemons are identified and documented.

2.2.4.b Examine system configurations to verify the following:

- All unnecessary functionality is removed or disabled.

- Only required functionality, as documented in the configuration standards, is enabled.