NIST SP 800-53 Rev 5: MA–2 Controlled Maintenance 3.7 3.7.1 3.7.2 Maintenance
NIST resources that defines requirement for controlled maintenance.
NIST resources that defines requirement for controlled maintenance.
NIST resources that defines requirements for review, assessment, and approval of system maintenance tools
NIST resource that defines processes for maintenance personnel.
In this video, Mike breaks down CMMC 2.0 Control MA L2-3.7.2. You need written procedures, you need documentation on your process for allowing access to your systems, you are going to have to justify every step of how you run your system on paper through written procedure and that includes your IT team and who gets access to what and how they get that access.