MA-4(1): Auditing And Review

Control Family:

Parent Control:

MA-4: Nonlocal Maintenance

Priority:

P2: Implement P2 security controls after implementation of P1 controls.

CSF v1.1 References:

PR.MA-2

Threats Addressed:

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
MA-4(1): Logging and Review

Control Statement

The organization:

Audits nonlocal maintenance and diagnostic sessions [Assignment: organization-defined audit events]; and
Reviews the records of the maintenance and diagnostic sessions.