Non-local Maintenance

class

Operational

family

Maintenance

number

MA-4

priority

P1

impact

LOW_MODERATE_HIGH

The organization: Authorizes, monitors, and controls non-local maintenance and diagnostic activities; Allows the use of non-local maintenance and diagnostic tools only as consistent with organizational policy and documented in the security plan for the information system; Employs strong identification and authentication techniques in the establishment of non-local maintenance and diagnostic sessions; Maintains records for non-local maintenance and diagnostic activities; and Terminates all sessions and network connections when non-local maintenance is completed.

Comments