Escort and watch maintenance people who don't have access authorization.
What it actually means
Supervise the maintenance activities of maintenance personnel who don't have required access authorization — escort and monitor outside technicians the whole time they're working on systems that touch CUI.
Pass or fail — an assessor needs a "yes" to each
- Are unauthorized maintenance personnel supervised and escorted during maintenance?
What to have ready
- Escort and supervision procedure for maintenance
- Visitor or escort logs tied to maintenance visits
Where teams trip up
- Leaving a vendor tech alone with CUI systems
- No escort process for maintenance visits
See where this control puts your score
Run all 110 requirements free in about 10 minutes — or draft your SSP language for this control. No signup.
Calculate your SPRS score →Draft your SSP language →