Assessment Objective
Determine if:
- MA-02(02)(a)
- MA-02(02)(a)[01] [Assignment: automated mechanisms] are used to schedule maintenance, repair, and replacement actions for the system;
- MA-02(02)(a)[02] [Assignment: automated mechanisms] are used to conduct maintenance, repair, and replacement actions for the system;
- MA-02(02)(a)[03] [Assignment: automated mechanisms] are used to document maintenance, repair, and replacement actions for the system;
- MA-02(02)(b)
- MA-02(02)(b)[01] up-to date, accurate, and complete records of all maintenance actions requested, scheduled, in process, and completed are produced.
- MA-02(02)(b)[02] up-to date, accurate, and complete records of all repair actions requested, scheduled, in process, and completed are produced.
- MA-02(02)(b)[03] up-to date, accurate, and complete records of all replacement actions requested, scheduled, in process, and completed are produced.
Assessment Methods
Examine
- Maintenance policy
- procedures addressing controlled system maintenance
- automated mechanisms supporting system maintenance activities
- system configuration settings and associated documentation
- maintenance records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Automated mechanisms supporting and/or implementing controlled maintenance
- automated mechanisms supporting and/or implementing the production of records of maintenance and repair actions
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | MA-02(02) Automated Maintenance Activities |