03.07.04 Maintenance Tools

This policy outlines the procedures for managing and controlling the use of system maintenance tools to ensure the confidentiality, integrity, and availability of Controlled Unclassified Information (CUI) within the organization. It covers the approval, control, and monitoring of maintenance tools, the checking of media for malicious code, and the secure handling and disposition of system maintenance equipment.

• A.03.07.04.a[01]: the use of system maintenance tools is approved.
• A.03.07.04.a[02]: the use of system maintenance tools is controlled.
• A.03.07.04.a[03]: the use of system maintenance tools is monitored.
• A.03.07.04.b: media with diagnostic and test programs are checked for malicious code before the media are used in the system.
• A.03.07.04.c: the removal of system maintenance equipment containing CUI is prevented by verifying that there is no CUI on the equipment, sanitizing or destroying the equipment, or retaining the equipment within the facility.