CCI-000869

Inspect the maintenance tools used by maintenance personnel for improper or unauthorized modifications.

Implementation Guidance

Determine if maintenance tools used by maintenance personnel are inspected for improper or unauthorized modifications.

Validation Procedures

Examine: [SELECT FROM: Maintenance policy; procedures addressing system maintenance tools; system maintenance tools and associated documentation; maintenance tool inspection records; maintenance records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system maintenance responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for inspecting maintenance tools; mechanisms supporting and/or implementing the inspection of maintenance tools].

The controls below (if any) were marked by NIST as being related to CCI-000869.