03.07.06 Maintenance Personnel

This policy outlines the procedures for authorizing and managing access for personnel involved in the maintenance of [System Name or Type], ensuring the integrity and confidentiality of Controlled Unclassified Information (CUI) residing on or processed by the system.

• A.03.07.06.a: a process for maintenance personnel authorization is established.
• A.03.07.06.b: a list of authorized maintenance organizations or personnel is maintained.
• A.03.07.06.c: non-escorted personnel who perform maintenance on the system possess the required access authorizations.
• A.03.07.06.d[01]: organizational personnel with required access authorizations are designated to supervise the maintenance activities of personnel who do not possess the required access authorizations.
• A.03.07.06.d[02]: organizational personnel with required technical competence are designated to supervise the maintenance activities of personnel who do not possess the required access authorizations.