Assessment Objective
Determine if:
- MA-04(04)(a) nonlocal maintenance sessions are protected by employing [Assignment: authenticators that are replay resistant];
- MA-04(04)(b)
- MA-04(04)(b)(01) nonlocal maintenance sessions are protected by separating maintenance sessions from other network sessions with the system by physically separated communication paths; or
- MA-04(04)(b)(02) nonlocal maintenance sessions are protected by logically separated communication paths.
Assessment Methods
Examine
- Maintenance policy
- procedures addressing nonlocal system maintenance
- system design documentation
- system configuration settings and associated documentation
- maintenance records
- audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- network engineers
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Organizational processes for protecting nonlocal maintenance sessions
- mechanisms implementing replay-resistant authenticators
- mechanisms implementing logically separated/encrypted communication paths
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | MA-04(04) Authentication and Separation of Maintenance Sessions |