id: "MA-04(07)" title: "Disconnect Verification" family: "MA" family_name: "Maintenance" sort_id: "ma-04.07" priority: "P2" implementation_level: "system" parent: "MA-04" enhancement: True
Statement
Verify session and network connection termination after the completion of nonlocal maintenance and diagnostic sessions.
Guidance
Verifying the termination of a connection once maintenance is completed ensures that connections established during nonlocal maintenance and diagnostic sessions have been terminated and are no longer available for use.
Assessment Objective: session connection termination is verified after the completion of nonlocal maintenance and diagnostic sessions;
Assessment Objective: network connection termination is verified after the completion of nonlocal maintenance and diagnostic sessions.
Maintenance policy
procedures addressing nonlocal system maintenance
system design documentation
system configuration settings and associated documentation
session/network termination logs
cryptographic mechanisms protecting nonlocal maintenance activities
maintenance records
diagnostic records
audit records
system security plan
other relevant documents or records
Organizational personnel with system maintenance responsibilities
network engineers
organizational personnel with information security responsibilities
system/network administrators
Mechanisms implementing remote disconnect verifications of terminated nonlocal maintenance and diagnostic sessions