id: "MA-05(05)" title: "Non-system Maintenance" family: "MA" family_name: "Maintenance" sort_id: "ma-05.05" priority: "P2" implementation_level: "organization" parent: "MA-05" enhancement: True
Statement
Ensure that non-escorted personnel performing maintenance activities not directly associated with the system but in the physical proximity of the system, have required access authorizations.
Guidance
Personnel who perform maintenance activities in other capacities not directly related to the system include physical plant personnel and custodial personnel.
Assessment Objective
non-escorted personnel performing maintenance activities not directly associated with the system but in the physical proximity of the system have required access authorizations.
Maintenance policy
procedures addressing maintenance personnel
system media protection policy
access control policy and procedures
physical and environmental protection policy and procedures
maintenance records
access control records
access authorizations
system security plan
other relevant documents or records
Organizational personnel with system maintenance responsibilities
organizational personnel with personnel security responsibilities
organizational personnel with physical access control responsibilities
organizational personnel with information security responsibilities