The organization reviews the information system per organization-defined frequency to eliminate unnecessary functions, ports, protocols, and/or services.
No STIG checks reference this CCI.