id: "MA-03(05)" title: "Execution with Privilege" family: "MA" family_name: "Maintenance" sort_id: "ma-03.05" priority: "P2" implementation_level: "system" parent: "MA-03" enhancement: True


Statement

Monitor the use of maintenance tools that execute with increased privilege.

Guidance

Maintenance tools that execute with increased system privilege can result in unauthorized access to organizational information and assets that would otherwise be inaccessible.

Assessment Objective

the use of maintenance tools that execute with increased privilege is monitored.

Maintenance policy

procedures addressing system maintenance tools

system maintenance tools and associated documentation

list of personnel authorized to use maintenance tools

maintenance tool usage records

maintenance records

system security plan

other relevant documents or records

Organizational personnel with system maintenance responsibilities

organizational personnel with information security responsibilities

Organizational processes for restricting the use of maintenance tools

organizational process for monitoring maintenance tools and maintenance tool usage

mechanisms monitoring the use of maintenance tools