CCI-002893

Ensure that non-escorted personnel performing maintenance activities not directly associated with the system but in the physical proximity of the system, have required access authorization.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to ensure that non-escorted personnel performing maintenance activities not directly associated with the information system but in the physical proximity of the system, have required access authorization.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed ensures that non-escorted personnel performing maintenance activities not directly associated with the information system but in the physical proximity of the system, have required access authorization.

Compelling Evidence

1.) Access authorization documentation for unescorted, uncleared maintenance personnel

The controls below (if any) were marked by NIST as being related to CCI-002893.