What is the REC control form?

• A. A form used to log test results.
• B. A form used to authorize initial budget approval.
• C. A form used to authorize and document maintenance within the SOC, when a certified system is opened or breached for maintenance
• D. A form used to update the SOC password list.

Answer: (C)

The key idea is that this form records and authorizes maintenance on certified systems inside the SOC whenever a system is opened for service or accessed after a breach. It creates an auditable trail by capturing who is performing the maintenance, what work is being done, when it happens, and why it’s needed, and it proper-gets the maintenance approved before it begins. This helps ensure the maintenance doesn’t compromise security and that the system is returned to a secure, compliant state afterward. It’s not about logging test results, approving budgets, or updating password lists, which are separate processes.