ComplianceNIST 800-53 enhancement
NIST-MA-4(4) Authentication and Separation of Maintenance Sessions
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- MA Maintenance
- Control
- MA-4(4)
Control statement
Protect nonlocal maintenance sessions by:
(a) Employing [Assignment: authenticators that are replay resistant] ; and
(b) Separating the maintenance sessions from other network sessions with the system by either:
(1) Physically separated communications paths; or
(2) Logically separated communications paths.
Discussion
Communications paths can be logically separated using encryption.
Related
Enhancement of · Compliance (1)
- NIST-MA-4 Nonlocal Maintenance NIST 800-53 control