Navigate

CCI-000886

CCI-000886 Definition

Defines the personnel or roles to be notified of the date and time of planned nonlocal maintenance.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if [MA-04(05)_ODP[02]; personnel and roles to be notified of the date and time of planned nonlocal maintenance is/are defined] is/are notified of the date and time of planned nonlocal maintenance.

Validation Procedures

Examine: [SELECT FROM: Maintenance policy; procedures addressing nonlocal system maintenance; notifications supporting nonlocal maintenance sessions; maintenance records; audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system maintenance responsibilities; organizational personnel with notification responsibilities; organizational personnel with approval responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for approving and notifying personnel regarding nonlocal maintenance; mechanisms supporting the notification and approval of nonlocal maintenance].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000886.

Control	Description
MA-4(5)	(a): Require the approval of each nonlocal maintenance session by [personnel or roles required to approve each nonlocal maintenance session is/are defined;] ; and (b): Notify the following personnel or roles of the date and time of planned nonlocal maintenance: [personnel and roles to be notified of the date and time of planned nonlocal maintenance is/are defined;].