+MA-05(02) Security Clearances for Classified Systems
|
MA-05(02) Security Clearances for Classified Systems
Control
Verify that personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess security clearances and formal access approvals for at least the highest classification level and for compartments of information on the system.
Discussion
Personnel who conduct maintenance on organizational systems may be exposed to classified information during the course of their maintenance activities. To mitigate the inherent risk of such exposure, organizations use maintenance personnel that are cleared (i.e., possess security clearances) to the classification level of the information stored on the system.
Assessment Objective
- personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess security clearances for at least the highest classification level and for compartments of information on the system;
- personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess formal access approvals for at least the highest classification level and for compartments of information on the system.
Assessment Method
Examine
Maintenance policy
procedures addressing maintenance personnel
personnel records
maintenance records
access control records
access credentials
access authorizations
system security plan
other relevant documents or records
Interview
Organizational personnel with system maintenance responsibilities
organizational personnel with personnel security responsibilities
organizational personnel with physical access control responsibilities
organizational personnel with information security responsibilities
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|