Principle: Utilize secure access technology and limit access to those individuals who must have it.

1: If the operating system includes firewall functionality, it should be configured to permit incoming session establishment only to the TCP and UDP ports for the specific services that will be run on the particular computer.

2: All unneeded services should be disabled and their server software prevented from running.

3: All systems offering services over a network should also make use of the network service wrappers recommended by the CERT (http://www.cert.org) and software, such as Tripwire, to monitor the integrity of the software on the system.