CCI-002886

Review the audit records of the maintenance and diagnostic sessions to detect anomalous behavior.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to review the records of the nonlocal maintenance and diagnostic sessions. The organization must maintain a record of reviews.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the record of reviews to ensure the organization being inspected/assessed reviews the records of the nonlocal maintenance and diagnostic sessions.

Compelling Evidence

1.) Policy that mandates the review of remote maintenance and digital sessions

The controls below (if any) were marked by NIST as being related to CCI-002886.