MA-5(5): Nonsystem-Related Maintenance

Control Family:

Maintenance

Parent Control:

MA-5: Maintenance Personnel

Priority:

P2: Implement P2 security controls after implementation of P1 controls.

CSF v1.1 References:

PR.MA-1

Threats Addressed:

Tampering

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
MA-5(5): Non-system Maintenance

Control Statement

The organization ensures that non-escorted personnel performing maintenance activities not directly associated with the information system but in the physical proximity of the system, have required access authorizations.

Supplemental Guidance

Personnel performing maintenance activities in other capacities not directly related to the information system include, for example, physical plant personnel and janitorial personnel.