MA-4(2): Document Nonlocal Maintenance

Control Family:

Maintenance

Parent Control:

MA-4: Nonlocal Maintenance

Priority:

P2: Implement P2 security controls after implementation of P1 controls.

CSF v1.1 References:

PR.MA-2

Threats Addressed:

Tampering
Lateral Movement

Baselines:

Moderate
High

Control is withdrawn in the next version of this control set and incorporated into: MA-1: Policy and Procedures, MA-4: Nonlocal Maintenance.

Control Statement

The organization documents in the security plan for the information system, the policies and procedures for the establishment and use of nonlocal maintenance and diagnostic connections.