id: "MA-05(03)" title: "Citizenship Requirements for Classified Systems" family: "MA" family_name: "Maintenance" sort_id: "ma-05.03" priority: "P2" implementation_level: "organization" parent: "MA-05" enhancement: True
Statement
Verify that personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information are U.S. citizens.
Guidance
Personnel who conduct maintenance on organizational systems may be exposed to classified information during the course of their maintenance activities. If access to classified information on organizational systems is restricted to U.S. citizens, the same restriction is applied to personnel performing maintenance on those systems.
Assessment Objective
personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information are U.S. citizens.
Maintenance policy
procedures addressing maintenance personnel
personnel records
maintenance records
access control records
access credentials
access authorizations
system security plan
other relevant documents or records
Organizational personnel with system maintenance responsibilities
organizational personnel with personnel security responsibilities
organizational personnel with information security responsibilities