Navigate

MA-3 (1)

MA-3 (1): Inspect Tools

The organization inspects the maintenance tools carried into a facility by maintenance personnel for improper or unauthorized modifications.

Supplemental

If, upon inspection of maintenance tools, organizations determine that the tools have been modified in an improper/unauthorized manner or contain malicious code, the incident is handled consistent with organizational policies and procedures for incident handling.

CIA Levels
Confidentiality	unknown
Integrity	moderate
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to MA-3 (1).

Control	Description
SI-7	The organization employs integrity verification tools to detect unauthorized changes to [Assignment: organization-defined software, firmware, and information].

Enhancements

The controls below (if any) add on to the requirements of MA-3 (1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to MA-3 (1).

CCI	Definition
CCI-000869	The organization inspects the maintenance tools carried into a facility by maintenance personnel for improper or unauthorized modifications.