Control Enhancements for Maintenance Tools Control Enhancement MA-3 (1) MA-3 (1) The organization inspects all maintenance tools carried into a facility by maintenance personnel for obvious improper modifications. MA-3 (1) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> MA-3 (1) What is the solution and how is it implemented? Control Enhancement MA-3 (2) MA-3 (2) The organization checks all media containing diagnostic and test programs for malicious code before the media are used in the information system. MA-3 (2) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable
Control Enhancements for Maintenance Tools Control Enhancement MA-3 (1) MA-3 (1) The organization inspects all maintenance tools carried into a facility by maintenance personnel for obvious improper modifications. MA-3 (1) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> MA-3 (1) What is the solution and how is it implemented? Control Enhancement MA-3 (2) MA-3 (2) The organization checks all media containing diagnostic and test programs for malicious code before the media are used in the information system. MA-3 (2) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable
System_Security_Plan_Template_012313_508.docx