MA-4(7)

Requirement

Verify session and network connection termination after the completion of nonlocal maintenance and diagnostic sessions.

Discussion

Verifying the termination of a connection once maintenance is completed ensures that connections established during nonlocal maintenance and diagnostic sessions have been terminated and are no longer available for use.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Maintenance policy; procedures addressing nonlocal system maintenance; system design documentation; system configuration settings and associated documentation; session/network termination logs; cryptographic mechanisms protecting nonlocal maintenance activities; maintenance records; diagnostic records; audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with system maintenance responsibilities; network engineers; organizational personnel with information security responsibilities; system/network administrators].

Test

[SELECT FROM: Mechanisms implementing remote disconnect verifications of terminated nonlocal maintenance and diagnostic sessions].

ID	Assessment Objectives
MA-04(07)[01]	session connection termination is verified after the completion of nonlocal maintenance and diagnostic sessions;
MA-04(07)[02]	network connection termination is verified after the completion of nonlocal maintenance and diagnostic sessions.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!