MA-4(5): Approvals and Notifications
CSF v1.1 References:
(Not part of any baseline)
- NIST Special Publication 800-53 Revision 4:
- MA-4(5): Approvals And Notifications
- Require the approval of each nonlocal maintenance session by [Assignment: organization-defined personnel or roles]; and
- Notify the following personnel or roles of the date and time of planned nonlocal maintenance: [Assignment: organization-defined personnel or roles].
Notification may be performed by maintenance personnel. Approval of nonlocal maintenance is accomplished by personnel with sufficient information security and system knowledge to determine the appropriateness of the proposed maintenance.