CCI-000865
CCI-000865 Definition
The organization approves information system maintenance tools.
| Status | |
| Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed documents the approved maintenance tools within the Security Plan.
Validation Procedures
The organization conducting the inspection/assessment: 1. obtains and examines the Security Plan to ensure the list of approved maintenance tools is documented; 2. ensures only the approved maintenance tools are used within the system.
Compelling Evidence
1.) Signed and dated System Security Plan (SSP), including a list of approved maintenance tools