CCI-000867

Implementation Guidance

The organization being inspected/assessed develops and implements procedures to monitor the use of the approved information system maintenance tools IAW MA-3, CCI 865. Records of monitoring activity must be maintained.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines: 1. the Security Plan to identify the list of approved maintenance tools; and 2. documented procedures to identify how the use of maintenance tools is monitored; and 3. reviews evidence that the monitoring is conducted IAW the documented procedures.

Compelling Evidence

1.) Signed and dated System Security Plan (SSP), including a list of approved maintenance tools