For a sample of system components, inspect enabled system devices. Verify that only necessary devices are installed and enabled. Implement security features for any required devices that are considered to be insecure. Every device object has a security descriptor, which contains an ACL that controls access to the device. The drivers for a device are responsible for ensuring that unauthorized users do not have access to the device.