Skip to main content

MA-5 Maintenance Personnel

Description​

The university allows only authorized personnel to perform maintenance on university information resources.

Applicability​

  • The owner of an information resource, or designee, is responsible for implementing this Control.

Implementation​

  • 1It is the responsibility of the information resource owner, or designee to:

    • 1.1Establish a process for maintenance personnel authorization;
    • 1.2Ensure that non-escorted personnel performing maintenance on the university information resource have required access authorizations; and
    • 1.3Designate university personnel with required access authorizations and technical competence to supervise the maintenance activities of personnel who do not possess the required access authorizations.