|
controlMA-5
Maintenance Personnel (MA-5)
Establish a process for maintenance personnel authorization and maintain a list of authorized maintenance organizations or personnel; Verify that non-escorted personnel performing maintenance on the system possess the required access authorizations; and Designate organizational personnel with required access authorizations and technical competence to supervise the maintenance activities of personnel who do not possess the required access authorizations.
Security Baselines
LOWMODERATEHIGH
maintenancesystem-maintenance
Why These Connect
Baselined In3
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports25
These related controls work together — a change to one may affect the others.
Enhances5
These enhancements add specific capabilities or refinements to the base control.
Related Controls(16)
AC-2Account Management (AC-2)
LMH
AC-3Access Enforcement (AC-3)LMH
AC-5Separation of Duties (AC-5)MH
IA-2Identification and Authentication (Organizational Users) (IA-2)LMH
MA-4Nonlocal Maintenance (MA-4)LMH
AC-6Least Privilege (AC-6)MH
IA-8Identification and Authentication (Non-organizational Users) (IA-8)LMH
MP-2Media Access (MP-2)LMH
PE-2Physical Access Authorizations (PE-2)LMH
PE-3Physical Access Control (PE-3)LMH
PS-7External Personnel Security (PS-7)LMH
RA-3Risk Assessment (RA-3)LMH
MA-7Field Maintenance (MA-7)MP-6Media Sanitization (MP-6)LMH
PL-2System Security and Privacy Plans (PL-2)LMH
PS-3Personnel Screening (PS-3)LMH