id: "MA-03(04)" title: "Restricted Tool Use" family: "MA" family_name: "Maintenance" sort_id: "ma-03.04" priority: "P2" implementation_level: "system" parent: "MA-03" enhancement: True
Statement
Restrict the use of maintenance tools to authorized personnel only.
Guidance
Restricting the use of maintenance tools to only authorized personnel applies to systems that are used to carry out maintenance functions.
Assessment Objective
the use of maintenance tools is restricted to authorized personnel only.
Maintenance policy
procedures addressing system maintenance tools
system maintenance tools and associated documentation
list of personnel authorized to use maintenance tools
maintenance tool usage records
maintenance records
system security plan
other relevant documents or records
Organizational personnel with system maintenance responsibilities
organizational personnel with information security responsibilities
Organizational processes for restricting the use of maintenance tools
mechanisms supporting and/or implementing the restricted use of maintenance tools