Assessment Objective

Determine if:

• nonlocal maintenance and diagnostic activities are approved.
• nonlocal maintenance and diagnostic activities are monitored.
• session connections are terminated when nonlocal maintenance is completed.
• network connections are terminated when nonlocal maintenance is completed.
• multi-factor authentication is implemented in the establishment of nonlocal maintenance and diagnostic sessions.
• replay resistance is implemented in the establishment of nonlocal maintenance and diagnostic sessions.

Assessment Methods

Examine

• maintenance policy and procedures
• remote access policy and procedures
• procedures for nonlocal system maintenance
• records of remote access
• maintenance records
• diagnostic records
• system design documentation
• system configuration settings
• system security plan
• other relevant documents or records

Interview

• personnel with system maintenance responsibilities
• personnel with information security responsibilities
• system administrators

Test

• processes for managing nonlocal maintenance
• mechanisms for implementing, supporting, or managing nonlocal maintenance
• mechanisms for implementing multi-factor authentication and replay resistance
• mechanisms for terminating nonlocal maintenance sessions and network connections

Povezane zadeve

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final