3.1.5 Restrict File System Access
It is recommended to use a file system that allows maintenance of access rights.
In Windows, NTFS allows for ACLs to be maintained at the most granular level; however, due care should be exercised when granting file system privileges to the “Everyone” group. Similarly, in UNIX like operating systems, privileges should not be granted to the “Nobody” user and group, unless absolutely required.
Parent topic: Data Center Practices