The Secure Configuration of the Cyber Essentials questionnaire reviews the configuration of your solution to ensure that they are aligned with the standard.

Question A5.1 requires you to remove and disable all software and services (this includes cloud services) that you do not use on your devices and have a process that documents the actions you complete to achieve this.

For the above you should think about:

• Autopilot
• Standard builds
• How you remove cloud services you no longer require?
• Do you remove services/software that is no longer installed on devices

The backbone of the above is to ensure that you limit the possible attack surface on your devices.

A5.2 requires that your devices are configured with security thus requiring that unrequired and unused user accounts on devices are removed if they are no longer required.

For Windows you can use something line Local users and Computers

For Mac To change these settings, choose Apple menu > System Settings, then click Users & Groups in the sidebar. (You may need to scroll down.)