Skip to main content
Back to results
NIST 800-171 R-3.7.6

Supervise Unauthorized Maintenance Personnel

Official citation: 3.7.6

Class: core · Severity: medium

Statement of the obligation — verify against source

3.7.6

What it means

Supervise maintenance performed by people who lack the access authorization normally required. Manufacturers, vendors, consultants, or integrators may need privileged access on short notice; you can issue temporary, one-time or time-limited credentials based on a risk assessment, but watch their activities while they work.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.