Assessment Objective
Determine if:
- MA-03a.
- MA-03a.[01] the use of system maintenance tools is approved;
- MA-03a.[02] the use of system maintenance tools is controlled;
- MA-03a.[03] the use of system maintenance tools is monitored;
- MA-03b. previously approved system maintenance tools are reviewed [Assignment: frequency].
Assessment Methods
Examine
- Maintenance policy
- procedures addressing system maintenance tools
- system maintenance tools and associated documentation
- maintenance records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for approving, controlling, and monitoring maintenance tools
- mechanisms supporting and/or implementing the approval, control, and/or monitoring of maintenance tools
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | MA-03 [H] Maintenance Tools |