id: "MA-05(02)" title: "Security Clearances for Classified Systems" family: "MA" family_name: "Maintenance" sort_id: "ma-05.02" priority: "P2" implementation_level: "organization" parent: "MA-05" enhancement: True
Statement
Verify that personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess security clearances and formal access approvals for at least the highest classification level and for compartments of information on the system.
Guidance
Personnel who conduct maintenance on organizational systems may be exposed to classified information during the course of their maintenance activities. To mitigate the inherent risk of such exposure, organizations use maintenance personnel that are cleared (i.e., possess security clearances) to the classification level of the information stored on the system.
Assessment Objective: personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess security clearances for at least the highest classification level and for compartments of information on the system;
Assessment Objective: personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess formal access approvals for at least the highest classification level and for compartments of information on the system.
Maintenance policy
procedures addressing maintenance personnel
personnel records
maintenance records
access control records
access credentials
access authorizations
system security plan
other relevant documents or records
Organizational personnel with system maintenance responsibilities
organizational personnel with personnel security responsibilities
organizational personnel with physical access control responsibilities
organizational personnel with information security responsibilities
Organizational processes for managing security clearances for maintenance personnel