CM-07(01) Periodic Review
All changes in this version
Title
Periodic Review
Control
(a) Review the system [Assignment: frequency] to identify unnecessary and/or nonsecure functions, ports, protocols, software, and services; and
(b) Disable or remove [Assignment: organization-defined functions, ports, protocols, software, and services within the system deemed to be unnecessary and/or nonsecure].
Discussion
Organizations review functions, ports, protocols, and services provided by systems or system components to determine the functions and services that are candidates for elimination. Such reviews are especially important during transition periods from older technologies to newer technologies (e.g., transition from IPv4 to IPv6). These technology transitions may require implementing the older and newer technologies simultaneously during the transition period and returning to minimum essential functions, ports, protocols, and services at the earliest opportunity. Organizations can either decide the relative security of the function, port, protocol, and/or service or base the security decision on the assessment of other entities. Unsecure protocols include Bluetooth, FTP, and peer-to-peer networking.
Parameters
cm-7.1_prm_2: organization-defined functions, ports, protocols, software, and services within the system deemed to be unnecessary and/or nonsecure
cm-07.01_odp.01: frequency
cm-07.01_odp.02: functions
cm-07.01_odp.03: ports
cm-07.01_odp.04: protocols
cm-07.01_odp.05: software
cm-07.01_odp.06: services
Related controls
ac-18
STIG rules that implement this control 4
Google Android 16 COBO Y26M10
- GOOG-16-009400 CAT III Google Android 16 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), Hands-Free Profile (HFP), and Serial Port Profile (SPP).
Google Android 17 COBO Y26M06
- GOOG-17-008000 CAT III Google Android 17 must be configured to disable Bluetooth or configured via User-Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), Hands-Free Profile (HFP), and Serial Port Profile (SPP).
Google Chrome Current Windows V2R11
- DTBC-0074 CAT II Use of the QUIC protocol must be disabled.
Samsung Android 16 COBO Y26M10
- KNOX-16-008300 CAT III Samsung Android must be configured to disable all Bluetooth profiles except for Headset Profile (HSP), Hands-Free Profile (HFP), Serial Port Profile (SPP), Advanced Audio Distribution Profile (A2DP), Audio/Video Remote Control Profile (AVRCP), and Phone Book Access Profile (PBAP).