Assessment Objective
Determine if:
- MA-03(05) the use of maintenance tools that execute with increased privilege is monitored.
Assessment Methods
Examine
- Maintenance policy
- procedures addressing system maintenance tools
- system maintenance tools and associated documentation
- list of personnel authorized to use maintenance tools
- maintenance tool usage records
- maintenance records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for restricting the use of maintenance tools
- organizational process for monitoring maintenance tools and maintenance tool usage
- mechanisms monitoring the use of maintenance tools
Tichete legate
| Tip de legătură | Tichet |
|---|---|
| blocks | MA-03(05) Execution with Privilege |