Assessment Objective
Determine if:
- MA-03(04) the use of maintenance tools is restricted to authorized personnel only.
Assessment Methods
Examine
- Maintenance policy
- procedures addressing system maintenance tools
- system maintenance tools and associated documentation
- list of personnel authorized to use maintenance tools
- maintenance tool usage records
- maintenance records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for restricting the use of maintenance tools
- mechanisms supporting and/or implementing the restricted use of maintenance tools
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | MA-03(04) Restricted Tool Use |