NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0
All03.01 Access Control03.02 Awareness and Training03.03 Audit and Accountability03.04 Configuration Management03.05 Identification and Authentication03.06 Incident Response03.07 Maintenance03.08 Media Protection03.09 Personnel Security03.10 Physical Protection03.11 Risk Assessment03.12 Security Assessment and Monitoring03.13 System and Communications Protection03.14 System and Information Integrity03.15 Planning03.16 System and Services Acquisition03.17 Supply Chain Risk Management
| Ref | Title | Text | |
|---|---|---|---|
| 03.07.01 | 03.07.01 withdrawn | ||
| 03.07.02 | 03.07.02 withdrawn | ||
| 03.07.03 | 03.07.03 withdrawn | ||
| 03.07.04 | Maintenance Tools | a. Approve, control, and monitor the use of system maintenance tools. b. Check media with diagnostic and test programs for malicious code before it is used in the system. c. Prevent the removal of system maintenance equipment containing CUI | |
| 03.07.05 | Nonlocal Maintenance | a. Approve and monitor nonlocal maintenance and diagnostic activities. b. Implement multi-factor authentication and replay resistance in the establishment of nonlocal maintenance and diagnostic sessions. c. Terminate session and network con | |
| 03.07.06 | Maintenance Personnel | a. Establish a process for maintenance personnel authorization. b. Maintain a list of authorized maintenance organizations or personnel. c. Verify that non-escorted personnel who perform maintenance on the system possess the required access |
6 of 130.