Assessment Objective
Determine if:
- MA-05(02)[01] personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess security clearances for at least the highest classification level and for compartments of information on the system;
- MA-05(02)[02] personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess formal access approvals for at least the highest classification level and for compartments of information on the system.
Assessment Methods
Examine
- Maintenance policy
- procedures addressing maintenance personnel
- personnel records
- maintenance records
- access control records
- access credentials
- access authorizations
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- organizational personnel with personnel security responsibilities
- organizational personnel with physical access control responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for managing security clearances for maintenance personnel
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | MA-05(02) Security Clearances for Classified Systems |