MA-5: Maintenance Personnel

NIST Baseline:  Low 

DIR Required By:  01/20/2023 

Review Date:  07/24/2024 

  • It is the responsibility of the information resource owner, or designee to: 
    • Establish a process for maintenance personnel authorization; 
    • Ensure that non-escorted personnel performing maintenance on the university information resource have required access authorizations; and 
    • Designate university personnel with required access authorizations and technical competence to supervise the maintenance activities of personnel who do not possess the required access authorizations. 

References/Additional Resources

None.  See any applicable internal procedures.