MA-4: Nonlocal Maintenance

NIST Baseline:  Low 

DIR Required By:  07/20/2023 

Review Date:  07/24/2024 

  • It is the responsibility of the information resource owner, or designee to: 
    • Approve and monitor nonlocal maintenance and diagnostic activities; 
    • Allow the use of nonlocal maintenance and diagnostic tools only as consistent with university policy; 
    • Employ strong authenticators in the establishment of nonlocal maintenance and diagnostic sessions; 
    • Maintain records for nonlocal maintenance and diagnostic activities; and 
    • Terminate session and network connections when nonlocal maintenance is completed. 

References/Additional Resources

FIPS 140-3 

FIPS 197 

FIPS 201-2 

SP 800-63-3 

SP 800-88