id: "SC-25" title: "Thin Nodes" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-25" priority: "P1" implementation_level: "system"
Statement
Employ minimal functionality and information storage on the following system components: {{ insert: param, sc-25_odp }}.
Guidance
The deployment of system components with minimal functionality reduces the need to secure every endpoint and may reduce the exposure of information, systems, and services to attacks. Reduced or minimal functionality includes diskless nodes and thin client technologies.
Assessment Objective: minimal functionality for {{ insert: param, sc-25_odp }} is employed;
Assessment Objective: minimal information storage on {{ insert: param, sc-25_odp }} is allocated.
System and communications protection policy
procedures addressing use of thin nodes
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
Mechanisms supporting and/or implementing thin nodes