CCI-000874

Implementation Guidance

The organization being inspected/assessed develops and implements procedures to monitor non-local maintenance and diagnostic activities. Records of monitoring activity must be maintained.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines: 1. the Security Plan to identify the authorized non-local maintenance and diagnostic activities; and 2. documented procedures to identify how the use of non-local maintenance and diagnostic activities are monitored; and 3. reviews evidence that the monitoring is conducted IAW the documented procedures.

Compelling Evidence

1.) List of identified authorized non-local maintenance and diagnostic activities 2.) Signed and dated Security Plan, referencing section with procedures for monitoring non-local maintenance and diagnostic activities 3.) Records of monitored non-local maintenance and diagnostic activities