NIST SP 800-53 Rev 5: MA–4 Nonlocal Maintenance 3.7 3.7.1 3.7.5 Maintenance
NIST resources that define requirements for nonlocal system maintenance activities
NIST resources that define requirements for nonlocal system maintenance activities
Control objectives for the implementation of multi-factor authentication from NIST SP 800-53.
The organization: a. Establishes a process for maintenance personnel authorization and maintains a list of authorized maintenance organizations or personnel; b. Ensures that non-escorted personnel performing maintenance on the information system have required access authorizations; and c. Designates organizational personnel with required access authorizations and technical competence to supervise the maintenance activities of personnel who do not possess the required access authorizations.
This NIST Special Publication provides guidance for completing the media sanitization process.
This is State of North Carolina’s IT System Maintenance policy and provides an example of the roles, responsibilities and various components of maintenance supervision.
NSA's Center for Storage Device Sanitization Research (CSDSR) guides the sanitization of information system (IS) storage devices. Resources for a vendor of storage device sanitization, the NSA Evaluated Products Lists (EPLs), and contact information for the Center for Storage Device Sanitization Research are provided on this page.
The USBGuard software framework provides system protection against intrusive USB devices by implementing basic whitelisting and blacklisting capabilities based on device attributes.
This sample policy provided by SANS discusses removable media.
This is a equipment disposal policy created by SANS that can be freely used.
This SANS whitepaper discusses the theory behind user-based two-factor (or multifactor) authentication systems, also known as “2FA”.