MA-4 (5)
MA-4 (5): Approvals And Notifications
The organization:
- MA-4 (5)(a): Requires the approval of each nonlocal maintenance session by [Assignment: organization-defined personnel or roles]; and
- MA-4 (5)(b): Notifies [Assignment: organization-defined personnel or roles] of the date and time of planned nonlocal maintenance.
Supplemental
Notification may be performed by maintenance personnel. Approval of nonlocal maintenance sessions is accomplished by organizational personnel with sufficient information security and information system knowledge to determine the appropriateness of the proposed maintenance.
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | unknown |
| Availability | unknown |
| Overlays |
|---|
| Int-A, Int-B, Int-C |