Assessment Objective
Determine if:
- MA-04(07)[01] session connection termination is verified after the completion of nonlocal maintenance and diagnostic sessions;
- MA-04(07)[02] network connection termination is verified after the completion of nonlocal maintenance and diagnostic sessions.
Assessment Methods
Examine
- Maintenance policy
- procedures addressing nonlocal system maintenance
- system design documentation
- system configuration settings and associated documentation
- session/network termination logs
- cryptographic mechanisms protecting nonlocal maintenance activities
- maintenance records
- diagnostic records
- audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- network engineers
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Mechanisms implementing remote disconnect verifications of terminated nonlocal maintenance and diagnostic sessions
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | MA-04(07) Disconnect Verification |