Navigate

CCI-002888

CCI-002888 Definition

Defines the personnel or roles authorized to approve each nonlocal maintenance session.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if the approval of each nonlocal maintenance session is required by [MA-04(05)_ODP[01]; personnel or roles required to approve each nonlocal maintenance session is/are defined].

Validation Procedures

Examine: [SELECT FROM: Maintenance policy; procedures addressing nonlocal system maintenance; notifications supporting nonlocal maintenance sessions; maintenance records; audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system maintenance responsibilities; organizational personnel with notification responsibilities; organizational personnel with approval responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for approving and notifying personnel regarding nonlocal maintenance; mechanisms supporting the notification and approval of nonlocal maintenance].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002888.

Control	Description
MA-4(5)	(a): Require the approval of each nonlocal maintenance session by [personnel or roles required to approve each nonlocal maintenance session is/are defined;] ; and (b): Notify the following personnel or roles of the date and time of planned nonlocal maintenance: [personnel and roles to be notified of the date and time of planned nonlocal maintenance is/are defined;].