unified
UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions
Approve, inspect, and control maintenance tools and media brought into facilities, checking them for improper modification and malicious code. Authorize and supervise maintenance personnel against a current list of approved individuals, with escorts for those lacking required access authorizations. Require nonlocal maintenance sessions to use approved connections and strong authentication, record the session, and terminate connections when maintenance is complete.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Secure Configuration & Change Management
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-CONFIG-08
- title
- Control maintenance tools, personnel, and remote sessions
- statement
- Approve, inspect, and control maintenance tools and media brought into facilities, checking them for improper modification and malicious code. Authorize and supervise maintenance personnel against a current list of approved individuals, with escorts for those lacking required access authorizations. Require nonlocal maintenance sessions to use approved connections and strong authentication, record the session, and terminate connections when maintenance is complete.
- domain
- Secure Configuration & Change Management
- control_type
- preventive
- control_category
- administrative
- members
- framework
- nist-800-53
- control_id
- MA-3
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- MA-4
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- MA-5
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions mitigates Malicious supply-chain injection of tampered hardware/software
- strength
- related
- rationale
- Inspecting maintenance tools/media for tampering blocks one narrow injection vector, but broad authenticity/integrity verification of acquired hardware and software (UC-CONFIG-06) is the operative supply-chain-injection defense.
- UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions mitigates Uncontrolled copying to removable media / unmanaged software installs
- strength
- related
- rationale
- Controlling and scanning maintenance media for malicious code contributes to preventing malicious-code introduction via removable media.
- UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions maps_to MA-3 — Maintenance Tools
- framework
- nist-800-53
- control_id
- MA-3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Security Control Assessment & POA&M Remediation tests UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions
- Controlled Hardware & System Maintenance operates UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions
- UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions maps_to MA-5 — Maintenance Personnel
- framework
- nist-800-53
- control_id
- MA-5
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions maps_to MA-4 — Nonlocal Maintenance
- framework
- nist-800-53
- control_id
- MA-4
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.