Assessment Objective
Determine if:
- MA-07 field maintenance on [Assignment: systems or system components] are restricted or prohibited to [Assignment: trusted maintenance facilities].
Assessment Methods
Examine
- Maintenance policy
- procedures addressing field maintenance
- system design documentation
- system configuration settings and associated documentation
- maintenance records
- diagnostic records
- system security plan
- other relevant documents or records.
Interview
- Organizational personnel with system maintenance responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Organizational processes for managing field maintenance
- mechanisms implementing, supporting, and/or managing field maintenance
- mechanisms for strong authentication of field maintenance diagnostic sessions
- mechanisms for terminating field maintenance sessions and network connections
Länkade ärenden
| Länktyp | Ärende |
|---|---|
| blocks | MA-07 Field Maintenance |