Navigate

CCI-000878

CCI-000878 Definition

Maintain records for nonlocal maintenance and diagnostic activities.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed maintains records of authorized non-local maintenance and diagnostic activities.

Validation Procedures

The organization conducting the inspection/assessment obtains records of authorized non-local maintenance and diagnostic activities, and examines a sampling to verify the organization is maintaining records for all non-local maintenance and diagnostic activities.

Compelling Evidence

1.) Records of non-local maintenance and diagnostic activities

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000878.

Control	Description
MA-4	The organization: a: Approves and monitors nonlocal maintenance and diagnostic activities; b: Allows the use of nonlocal maintenance and diagnostic tools only as consistent with organizational policy and documented in the security plan for the information system; c: Employs strong authenticators in the establishment of nonlocal maintenance and diagnostic sessions; d: Maintains records for nonlocal maintenance and diagnostic activities; and e: Terminates session and network connections when nonlocal maintenance is completed.

Control

Description

MA-4

The organization:

a: Approves and monitors nonlocal maintenance and diagnostic activities;

b: Allows the use of nonlocal maintenance and diagnostic tools only as consistent with organizational policy and documented in the security plan for the information system;

c: Employs strong authenticators in the establishment of nonlocal maintenance and diagnostic sessions;

d: Maintains records for nonlocal maintenance and diagnostic activities; and

e: Terminates session and network connections when nonlocal maintenance is completed.