3.7.6SPRS: 1 point

Supervise maintenance activities of personnel without required access

Maintenance · NIST SP 800-171 Rev 2

Requirement

Supervise the maintenance activities of maintenance personnel without required access authorization.

Discussion

This requirement applies to individuals who are performing hardware or software maintenance on organizational systems, while 3.10.1 addresses physical access for individuals whose maintenance duties place them within the physical protection perimeter of the systems (e.g., custodial staff, physical plant maintenance personnel). Individuals not previously identified as authorized maintenance personnel, such as information technology manufacturers, vendors, consultants, and systems integrators, may

How this affects your SPRS score

Under the DoD Assessment Methodology, a perfect SPRS score is 110. If this control is not met, 1 point is subtracted from your score.

Want your estimated SPRS score?

Answer 15 quick questions covering the highest-impact controls and get an instant estimate.

Estimate my SPRS score →

Source: NIST SP 800-171 Rev 2 (public domain) · SPRS weighting per the DoD Assessment Methodology · This is reference information, not an official assessment.

Support is offline

Enable live chat support. We use Crisp which stores a cookie and may process your email. See our Privacy Policy.

Support is offline

Enable live chat support. We use Crisp which stores a cookie and may process your email. See our Privacy Policy.