MA.L2-3.7.6—Maintenance Personnel
Level 2
800-171: 3.7.6
>Control Description
Supervise the maintenance activities of maintenance personnel without required access authorization.
>Cross-Framework Mappings
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What is your policy for escorting maintenance personnel without clearance?
- •How do you determine which maintenance personnel require supervision?
- •Who is qualified to supervise maintenance personnel?
- •What is your process for documenting supervised maintenance activities?
Technical Implementation:
- •What tools monitor maintenance personnel activities?
- •What logging captures actions of supervised maintenance personnel?
- •What technical oversight capabilities monitor maintenance activities?
- •What session recording tools document supervised maintenance?
Evidence & Documentation:
- •What maintenance procedures and schedules can you provide?
- •What maintenance records and work orders demonstrate maintenance activities?
- •What sanitization certificates show equipment was sanitized before off-site maintenance?
- •What remote maintenance session logs can you show?
- •What tool inventory lists approved maintenance tools?
- •What evidence shows maintenance personnel are properly supervised or vetted?
Ask AI
Configure your API key to use AI features.