SC-25: Thin Nodes

CSF v1.1 References:

Baselines:

  • Low

    N/A

  • Moderate

    N/A

  • High

    N/A

Next Version:

Control Statement

The organization employs [Assignment: organization-defined information system components] with minimal functionality and information storage.

Supplemental Guidance

The deployment of information system components with reduced/minimal functionality (e.g., diskless nodes and thin client technologies) reduces the need to secure every user endpoint, and may reduce the exposure of information, information systems, and services to cyber attacks.