S 4.38 Deactivation of unnecessary service features

Initiation responsibility: IT Security Management

Implementation responsibility: IT-user

Unnecessary service features (particularly the remote-inquiry function) should, if possible, be deactivated to prevent misuse and improper operation. To determine whether a service feature is necessary, the associated security risks should also be taken into consideration.

Additional controls:

• Are users explicitly requested to deactivate unnecessary service features?