// ITSP.10.171 · FAMILY 07 · 3 REQUIREMENTS
Maintenance
Last verified: 2026-10-05
// REQUIREMENTS
// INTENT
Control who services the systems, with what tools, from where.
// WHAT A FIRST ASSESSMENT FINDS
The MSP's whole bench has a remote tool on every machine, and the photocopier technician has had a network drop for years.
// THE WORK
Scope who may service what, route remote access through a jump host, record support sessions, and sanitize equipment before it leaves for repair. Your photocopier tech and your MSP both count.
// HOW WE CAN INTERPRET IT
// TEMPLATES FOR THIS FAMILY
References
- Protecting specified information in non-Government of Canada systems and organizations (ITSP.10.171)Canadian Centre for Cyber Securitycyber.gc.ca
- NIST SP 800-171 Revision 3, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsNISTcsrc.nist.gov
Outbound links open in a new tab. Source-pinned. If a vendor moves a doc, this block gets updated.