CM-7: Least Functionality

An OSCAL Control

- organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services
- mission-essential capabilities
  mission-essential capabilities for the system are defined;
- functions
  functions to be prohibited or restricted are defined;
- ports
  ports to be prohibited or restricted are defined;
- protocols
  protocols to be prohibited or restricted are defined;
- software
  software to be prohibited or restricted is defined;
- services
  services to be prohibited or restricted are defined;