MA-4(6)

Requirement

Implement the following cryptographic mechanisms to protect the integrity and confidentiality of nonlocal maintenance and diagnostic communications: [Assignment: organization-defined cryptographic mechanisms].

Discussion

Failure to protect nonlocal maintenance and diagnostic communications can result in unauthorized individuals gaining access to organizational information. Unauthorized access during remote maintenance sessions can result in a variety of hostile actions, including malicious code insertion, unauthorized changes to system parameters, and exfiltration of organizational information. Such actions can result in the loss or degradation of mission or business capabilities.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Maintenance policy; procedures addressing nonlocal system maintenance; system design documentation; system configuration settings and associated documentation; cryptographic mechanisms protecting nonlocal maintenance activities; maintenance records; diagnostic records; audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with system maintenance responsibilities; network engineers; organizational personnel with information security responsibilities; system/network administrators].

Test

[SELECT FROM: Cryptographic mechanisms protecting nonlocal maintenance and diagnostic communications].

ID	Assessment Objectives
MA-04(06)[01]	<MA-04(06)_ODP cryptographic mechanisms> are implemented to protect the integrity of nonlocal maintenance and diagnostic communications;
MA-04(06)[02]	<MA-04(06)_ODP cryptographic mechanisms> are implemented to protect the confidentiality of nonlocal maintenance and diagnostic communications.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!