+MA-03(01) Inspect Tools
|
MA-03(01) Inspect Tools
Control
Inspect the maintenance tools used by maintenance personnel for improper or unauthorized modifications.
Discussion
Maintenance tools can be directly brought into a facility by maintenance personnel or downloaded from a vendor’s website. If, upon inspection of the maintenance tools, organizations determine that the tools have been modified in an improper manner or the tools contain malicious code, the incident is handled consistent with organizational policies and procedures for incident handling.
Assessment Objective
maintenance tools used by maintenance personnel are inspected for improper or unauthorized modifications.
Assessment Method
Examine
Maintenance policy
procedures addressing system maintenance tools
system maintenance tools and associated documentation
maintenance tool inspection records
maintenance records
system security plan
other relevant documents or records
Interview
Organizational personnel with system maintenance responsibilities
organizational personnel with information security responsibilities
1. Resumen
1.1 Referencias
1.2 Requisitos identificados
1.3 Regulaciones relacionadas
2. Requisitos identificados
Requisitos
| Fuente |
Requisito |
3. Regulaciones relacionadas
Regulaciones
| Fuente |
Regulación |
Incidencias vinculadas
|