Maintenance Personnel (MA-5)
Establish a process for maintenance personnel authorization and maintain a list of authorized maintenance organizations or personnel; Verify that non-escorted personnel performing maintenance on the system possess the required access authorizations; and Designate organizational personnel with required access authorizations and technical competence to supervise the maintenance activities of personnel who do not possess the required access authorizations.
Security Baselines
Why These Connect
These are equivalent or closely aligned requirements in other frameworks.
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
These related controls work together — a change to one may affect the others.
These enhancements add specific capabilities or refinements to the base control.