id: "MA-03(05)" title: "Execution with Privilege" family: "MA" family_name: "Maintenance" sort_id: "ma-03.05" priority: "P2" implementation_level: "system" parent: "MA-03" enhancement: True
Statement
Monitor the use of maintenance tools that execute with increased privilege.
Guidance
Maintenance tools that execute with increased system privilege can result in unauthorized access to organizational information and assets that would otherwise be inaccessible.
Assessment Objective
the use of maintenance tools that execute with increased privilege is monitored.
Maintenance policy
procedures addressing system maintenance tools
system maintenance tools and associated documentation
list of personnel authorized to use maintenance tools
maintenance tool usage records
maintenance records
system security plan
other relevant documents or records
Organizational personnel with system maintenance responsibilities
organizational personnel with information security responsibilities
Organizational processes for restricting the use of maintenance tools
organizational process for monitoring maintenance tools and maintenance tool usage
mechanisms monitoring the use of maintenance tools