Skip to main content

MA-4 Nonlocal Maintenance

Description​

The university authorizes, monitors, and controls any remotely executed (i.e. nonlocal) maintenance and diagnostic activities.

Applicability​

  • The owner of an information resource, or designee, is responsible for implementing this Control.

Implementation​

  • 1It is the responsibility of the information resource owner, or designee to:

    • 1.1Approve and monitor nonlocal maintenance and diagnostic activities;
    • 1.2Allow the use of nonlocal maintenance and diagnostic tools only as consistent with university policy;
    • 1.3Employ strong authenticators in the establishment of nonlocal maintenance and diagnostic sessions;
    • 1.4Maintain records for nonlocal maintenance and diagnostic activities; and
    • 1.5Terminate session and network connections when nonlocal maintenance is completed.