Navigate

CCI-000878

CCI-000878 Definition

The organization maintains records for nonlocal maintenance and diagnostic activities.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed maintains records of authorized non-local maintenance and diagnostic activities.

Validation Procedures

The organization conducting the inspection/assessment obtains records of authorized non-local maintenance and diagnostic activities, and examines a sampling to verify the organization is maintaining records for all non-local maintenance and diagnostic activities.

Compelling Evidence

1.) Records of non-local maintenance and diagnostic activities

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000878.

Control	Description
MA-4	The organization: MA-4a.: Approves and monitors nonlocal maintenance and diagnostic activities; MA-4b.: Allows the use of nonlocal maintenance and diagnostic tools only as consistent with organizational policy and documented in the security plan for the information system; MA-4c.: Employs strong authenticators in the establishment of nonlocal maintenance and diagnostic sessions; MA-4d.: Maintains records for nonlocal maintenance and diagnostic activities; and MA-4e.: Terminates session and network connections when nonlocal maintenance is completed.

Control

Description

MA-4

The organization:

MA-4a.: Approves and monitors nonlocal maintenance and diagnostic activities;

MA-4b.: Allows the use of nonlocal maintenance and diagnostic tools only as consistent with organizational policy and documented in the security plan for the information system;

MA-4c.: Employs strong authenticators in the establishment of nonlocal maintenance and diagnostic sessions;

MA-4d.: Maintains records for nonlocal maintenance and diagnostic activities; and

MA-4e.: Terminates session and network connections when nonlocal maintenance is completed.