Sub-Requirement 8.5.6

8.5.6 Enable accounts used by vendors for remote maintenance only during the time period needed.

Illustrative Controls and the TIBCO LogLogic Solution

Accounts must often be created for vendors to perform remote troubleshooting and maintenance of IT systems and applications. Care must be taken to ensure that these vendors only have access during maintenance hours and when personnel are available to monitor the process. Administrators must identify all access to ensure vendors are only logging in during approved maintenance periods.

Reports and Alerts

Use the following link/reference to see the 8.5.6 reports and alerts: 8.5.6 on page 129.