2cac8686_plication_Security_and_Privacy__Derived_Security_Controls
Exposure of unnecessary protocols & services [Derived Security Controls] 
Do not use insecure protocols such as Telnet and plain FTP Implement access control for all protocols (e.g for secure FTP disallowing anonymous access, preventing SMTP being used as an open relay) Use firewalls to prevent external access to internal services Remove, disable or block un-necessary services (see also decommissioning below) Limit remote access to trusted IP addresses and enforce access using an encrypted method Segment services so that a compromise of one does not lead to wider system compromise Consider using a Virtual private Network (VPN) using strong credentials (such as two-factor authentication) for all remote access Scan ports of all system components periodically to verify that only the intended services are available externally, internally, and from particular other locations Document and periodically review all the services allowed
Privacy : Application Security and Privacy
Derived Security Controls