(a) Require the approval of each nonlocal maintenance session by [Assignment: organization-defined personnel or roles]; and
(b) Notify the following personnel or roles of the date and time of planned nonlocal maintenance: [Assignment: organization-defined personnel or roles].
|
|
| Control Identifier | MA-4(5) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | Notification may be performed by maintenance personnel. Approval of nonlocal maintenance is accomplished by personnel with sufficient information security and system knowledge to determine the appropriateness of the proposed maintenance. |
| Related Controls | None. |