NIST SP 800-53 Rev 5: MA–2 Controlled Maintenance 3.7 3.7.1 3.7.2 Maintenance
NIST resources that defines requirement for controlled maintenance.
NIST resources that defines requirement for controlled maintenance.
NIST resources that defines requirements for review, assessment, and approval of system maintenance tools
The organization: a. Establishes a process for maintenance personnel authorization and maintains a list of authorized maintenance organizations or personnel; b. Ensures that non-escorted personnel performing maintenance on the information system have required access authorizations; and c. Designates organizational personnel with required access authorizations and technical competence to supervise the maintenance activities of personnel who do not possess the required access authorizations.