MA-4(4)
MA-4(4): Authentication / Separation of Maintenance Sessions
The organization protects nonlocal maintenance sessions by:
- (a): Employing [organization-defined authenticators that are replay resistant]; and
-
(b): Separating the maintenance sessions from other network sessions with the information system by either:
- (1): Physically separated communications paths; or
- (2): Logically separated communications paths based upon encryption.
Supplemental
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | high |
| Availability | unknown |
| Overlays |
|---|
| None |
| CSF Categories |
|---|
| None |