CCI-000881

The organization documents, in the security plan for the information system, the policies and procedures for the establishment and use of nonlocal maintenance and diagnostic connections.

Implementation Guidance

The organization being inspected/assessed documents within the Security Plan the policies and procedures for the establishment and use of nonlocal maintenance and diagnostic connections.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the Security Plan to ensure the plan identifies the establishment and use of non-local maintenance and diagnostic connections.

Compelling Evidence

1.) Signed and dated system security plan detailing the procedures for remote maintenance and digital connections

The controls below (if any) were marked by NIST as being related to CCI-000881.