CyberStrikeus/CyberStrike - Page 128

ma-3-maintenance-tools

Approve, control, and monitor the use of system maintenance tools;

ma-4-1-logging-and-review

Log [organization-defined] for nonlocal maintenance and diagnostic sessions;

ma-4-2-document-nonlocal-maintenance

Document Nonlocal Maintenance

ma-4-3-comparable-security-and-sanitization

Require that nonlocal maintenance and diagnostic services be performed from a system that implements a security capability comparable to the capabi...

ma-4-4-authentication-and-separation-of-maintenance-sessions

Protect nonlocal maintenance sessions by: Employing [organization-defined] ; and Separating the maintenance sessions from other network sessions with

ma-4-5-approvals-and-notifications

Require the approval of each nonlocal maintenance session by [organization-defined] ;

ma-4-6-cryptographic-protection

Implement the following cryptographic mechanisms to protect the integrity and confidentiality of nonlocal maintenance and diagnostic communications: [

ma-4-7-disconnect-verification

Verify session and network connection termination after the completion of nonlocal maintenance and diagnostic sessions.

ma-4-nonlocal-maintenance

Approve and monitor nonlocal maintenance and diagnostic activities;

ma-5-1-individuals-without-appropriate-access

Implement procedures for the use of maintenance personnel that lack appropriate security clearances or are not U.S.

ma-5-2-security-clearances-for-classified-systems

Verify that personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information possess

ma-5-3-citizenship-requirements-for-classified-systems

Verify that personnel performing maintenance and diagnostic activities on a system processing, storing, or transmitting classified information are ...

ma-5-4-foreign-nationals

Ensure that: Foreign nationals with appropriate security clearances are used to conduct maintenance and diagnostic activities on classified systems on

ma-5-5-non-system-maintenance

Ensure that non-escorted personnel performing maintenance activities not directly associated with the system but in the physical proximity of the syst

ma-5-maintenance-personnel

Establish a process for maintenance personnel authorization and maintain a list of authorized maintenance organizations or personnel;

ma-6-1-preventive-maintenance

Perform preventive maintenance on [organization-defined] at [organization-defined].

ma-6-2-predictive-maintenance

Perform predictive maintenance on [organization-defined] at [organization-defined].

ma-6-3-automated-support-for-predictive-maintenance

Transfer predictive maintenance data to a maintenance management system using [organization-defined].

ma-6-timely-maintenance

Obtain maintenance support and/or spare parts for [organization-defined] within [organization-defined] of failure.

ma-7-field-maintenance

Restrict or prohibit field maintenance on [organization-defined] to [organization-defined].

mp-1-policy-and-procedures

Develop, document, and disseminate to [organization-defined]: [organization-defined] media protection policy that: Procedures to facilitate the implem

mp-2-1-automated-restricted-access

Automated Restricted Access

mp-2-2-cryptographic-protection

Cryptographic Protection

mp-2-media-access

Restrict access to [organization-defined] to [organization-defined].

mp-3-media-marking

Mark system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information;

mp-4-1-cryptographic-protection

Cryptographic Protection

mp-4-2-automated-restricted-access

Restrict access to media storage areas and log access attempts and access granted using [organization-defined].

mp-4-media-storage

Physically control and securely store [organization-defined] within [organization-defined] ;

mp-5-1-protection-outside-of-controlled-areas

Protection Outside of Controlled Areas

mp-5-2-documentation-of-activities

Documentation of Activities

mp-5-3-custodians

Employ an identified custodian during transport of system media outside of controlled areas.

mp-5-4-cryptographic-protection

Cryptographic Protection

mp-5-media-transport

Protect and control [organization-defined] during transport outside of controlled areas using [organization-defined];

mp-6-1-review-approve-track-document-and-verify

Review, approve, track, document, and verify media sanitization and disposal actions.

mp-6-2-equipment-testing

Test sanitization equipment and procedures [organization-defined] to ensure that the intended sanitization is being achieved.

mp-6-3-nondestructive-techniques

Apply nondestructive sanitization techniques to portable storage devices prior to connecting such devices to the system under the following circumstan

mp-6-4-controlled-unclassified-information

Controlled Unclassified Information

mp-6-5-classified-information

Classified Information

mp-6-6-media-destruction

Media Destruction

mp-6-7-dual-authorization

Enforce dual authorization for the sanitization of [organization-defined].