CCI-000887

The organization requires the approval of each nonlocal maintenance session by organization-defined personnel or roles.

Implementation Guidance

The organization being inspected/assessed defines within their maintenance procedures a process for the ISSO to approve the non-local maintenance. Written approval must be maintained. DoD has defined the personnel or roles as the ISSO.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the maintenance procedures and historical approvals to ensure that the ISSO approves the non-local maintenance. DoD has defined the personnel or roles as the ISSO.

Compelling Evidence

1.) Policy that details the requirement for remote maintenance and digital sessions to be approved

The controls below (if any) were marked by NIST as being related to CCI-000887.