MA-4—Nonlocal Maintenance

Approve and monitor nonlocal maintenance and diagnostic activities;

Allow the use of nonlocal maintenance and diagnostic tools only as consistent with organizational policy and documented in the security plan for the system;

Employ strong authentication in the establishment of nonlocal maintenance and diagnostic sessions;

Maintain records for nonlocal maintenance and diagnostic activities; and

Terminate session and network connections when nonlocal maintenance is completed.