Assessment Objective
Determine if:
- MA-05(05) non-escorted personnel performing maintenance activities not directly associated with the system but in the physical proximity of the system have required access authorizations.
Assessment Methods
Examine
- Maintenance policy
- procedures addressing maintenance personnel
- system media protection policy
- access control policy and procedures
- physical and environmental protection policy and procedures
- maintenance records
- access control records
- access authorizations
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- organizational personnel with personnel security responsibilities
- organizational personnel with physical access control responsibilities
- organizational personnel with information security responsibilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | MA-05(05) Non-system Maintenance |