CM-7.1: Periodic Review

An OSCAL Control

- organization-defined functions, ports, protocols, software, and services within the system deemed to be unnecessary and/or nonsecure
- frequency
  the frequency at which to review the system to identify unnecessary and/or non-secure functions, ports, protocols, software, and/or services is defined;
- functions
  functions to be disabled or removed when deemed unnecessary or non-secure are defined;
- ports
  ports to be disabled or removed when deemed unnecessary or non-secure are defined;
- protocols
  protocols to be disabled or removed when deemed unnecessary or non-secure are defined;
- software
  software to be disabled or removed when deemed unnecessary or non-secure is defined;
- services
  services to be disabled or removed when deemed unnecessary or non-secure are defined;