CCI-000866
CCI-000866 Definition
The organization controls information system maintenance tools.
| Status | |
| Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed controls information system maintenance tools that are approved IAW MA-3, CCI 865.
Validation Procedures
The organization conducting the inspection/assessment: 1. obtains and examines the Security Plan to identify the list of approved maintenance tools; 2. ensures the organization being inspected/assessed controls the approved information system maintenance tools.
Compelling Evidence
1.) Signed and dated System Security Plan (SSP), including a list of approved maintenance tools