+MA-07 Field Maintenance
|
MA-07 Field Maintenance
Control
Restrict or prohibit field maintenance on [Assignement: systems or system components] to [Assignement: trusted maintenance facilities].
Discussion
Field maintenance is the type of maintenance conducted on a system or system component after the system or component has been deployed to a specific site (i.e., operational environment). In certain instances, field maintenance (i.e., local maintenance at the site) may not be executed with the same degree of rigor or with the same quality control checks as depot maintenance. For critical systems designated as such by the organization, it may be necessary to restrict or prohibit field maintenance at the local site and require that such maintenance be conducted in trusted facilities with additional controls.
Assessment Objective
field maintenance on [Assignement: systems or system components] are restricted or prohibited to [Assignement: trusted maintenance facilities].
Assessment Method
Examine
Maintenance policy
procedures addressing field maintenance
system design documentation
system configuration settings and associated documentation
maintenance records
diagnostic records
system security plan
other relevant documents or records.
Interview
Organizational personnel with system maintenance responsibilities
organizational personnel with information security responsibilities
system/network administrators
1. Prezentare generală
1.1 Referințe
1.2 Cerințe identificate
1.3 Reglementări asociate
2. Cerințe identificate
3. Reglementări asociate
Reglementări
| Sursă |
Reglementare |
Tichete legate
|