# SC-25 Thin Nodes

NIST SP 800-53 control. Family: SC System and Communications Protection. Function: preventative. In no baseline. Mapping licence: CC BY-SA 4.0.

Statement: Employ minimal functionality and information storage on the following system components: [Assignment: organization-defined system components].
Guidance: The deployment of system components with minimal functionality reduces the need to secure every endpoint and may reduce the exposure of information, systems, and services to attacks. Reduced or minimal functionality includes diskless nodes and thin client technologies.

## Clauses by framework (2 frameworks)
- finma_circular: IV.D(81)
- rbi_csf: Annex1.4

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/SC-25
- Clauses only: /api/v1/controls/SC-25?fields=mappings
- Page for people: /controls/sc-25/
- Found an error? Open an issue at https://github.com/opensecurityarchitecture/osa-data/issues with the id, what OSA says and what the source says.