CCI-000873

Implementation Guidance

The organization being inspected/assessed documents the procedures for approving non-local maintenance and diagnostic activities within the Security Plan. The organization must maintain records of approved non-local maintenance and diagnostic activities.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines: 1. the Security Plan to ensure the procedures for approving non-local maintenance and diagnostic activities are documented; and 2. records approving non-local maintenance and diagnostic activities.

Compelling Evidence

1.) Signed and dated Security Plan, referencing section with procedures for approving non-local maintenance and diagnostic activities 2.) Records of approved non-local maintenance and diagnostic activities