MA-4(5): Approvals and Notifications

Control Family:

Maintenance

Parent Control:

MA-4: Nonlocal Maintenance

CSF v1.1 References:

PR.MA-2

Threats Addressed:

Tampering
Lateral Movement

Baselines:

(Not part of any baseline)

Previous Version:

NIST Special Publication 800-53 Revision 4:
MA-4(5): Approvals And Notifications

Control Statement

Require the approval of each nonlocal maintenance session by [Assignment: organization-defined personnel or roles]; and
Notify the following personnel or roles of the date and time of planned nonlocal maintenance: [Assignment: organization-defined personnel or roles].

Supplemental Guidance

Notification may be performed by maintenance personnel. Approval of nonlocal maintenance is accomplished by personnel with sufficient information security and system knowledge to determine the appropriateness of the proposed maintenance.