Cyber Resilience

NIST 800-53 r5 · Controls catalogue · Family MA

MA-4Nonlocal Maintenance

Approve and monitor nonlocal maintenance and diagnostic activities; Allow the use of nonlocal maintenance and diagnostic tools only as consistent with organizational policy and documented in the security plan for the system; Employ strong authentication in the establishment of nonlocal maintenance and diagnostic sessions; Maintain records for nonlocal maintenance and diagnostic activities; and Terminate session and network connections when nonlocal maintenance is completed.

Last updated: 22 August 2026 07:11 UTC

Implementations targeting this control (0)

ATT&CK techniques this control mitigates (0)

Weaknesses this control addresses (5)AI-assisted

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

CWE Name CVEs Why this control addresses it
CWE-284Improper Access Control6,900+Approving and monitoring nonlocal maintenance per policy enforces access control over remote diagnostic activities.
CWE-287Improper Authentication5,200+Requiring strong authentication for establishing nonlocal maintenance sessions directly mitigates improper authentication.
CWE-306Missing Authentication for Critical Function3,300+Mandating authentication for nonlocal maintenance addresses missing authentication for this critical function.
CWE-613Insufficient Session Expiration600+Terminating sessions and network connections upon completion prevents insufficient session expiration.
CWE-778Insufficient Logging28Maintaining records of nonlocal maintenance activities ensures logging to support detection of issues.

Top CVEs where this control is the strongest mitigation

CVE Risk CVSS EPSS Match
No CVEs annotated to this control yet — the per-CVE backfill is in progress.

Other controls in family MA

MA-1 MA-2 MA-3 MA-5 MA-6 MA-7