CM.2.062 Employ the principle of least functionality by configuring organizational systems to provide only essential capabilities.

CMMC Practice CM.2.062: Employ the principle of least functionality by configuring organizational systems to provide only essential capabilities.

Links to Publicly Available Resources

CMMC CLARIFICATION (Ref CMMC – Appendix B)

You should customize organizational systems. To do this, remove non-essential applications and disable services not needed. Systems come with many unnecessary applications and settings enabled by default. Disable unnecessary software and services. These include unused ports and protocols. Leave only the fewest capabilities necessary for the systems to operate effectively.