Detections
Analytics
800-53|MA-3
Title
MAINTENANCE TOOLSDescription
The organization approves, controls, and monitors information system maintenance tools.Supplemental
This control addresses security-related issues associated with maintenance tools used specifically for diagnostic and repair actions on organizational information systems. Maintenance tools can include hardware, software, and firmware items. Maintenance tools are potential vehicles for transporting malicious code, either intentionally or unintentionally, into a facility and subsequently into organizational information systems. Maintenance tools can include, for example, hardware/software diagnostic test equipment and hardware/software packet sniffers. This control does not cover hardware/software components that may support information system maintenance, yet are a part of the system, for example, the software implementing 'ping', 'ls', 'ipconfig', or the hardware and software implementing the monitoring port of an Ethernet switch.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: MA-2,MA-5,MP-6
Category: MAINTENANCE
Family: MAINTENANCE
Priority: P3
Baseline Impact: MODERATE,HIGH
Audit Items
View all Reference Audit Items