Skip to main content

πŸ’Ό MA-2 Controlled Maintenance (L)(M)(H)

  • Contextual name: πŸ’Ό MA-2 Controlled Maintenance (L)(M)(H)
  • ID: /frameworks/fedramp-high-security-controls/ma/02
  • Located in: πŸ’Ό Maintenance

Description​

a. Schedule, document, and review records of maintenance, repair, and replacement on system components in accordance with manufacturer or vendor specifications and/or organizational requirements;

b. Approve and monitor all maintenance activities, whether performed on site or remotely and whether the system or system components are serviced on site or removed to another location;

c. Require that [Assignment: organization-defined personnel or roles] explicitly approve the removal of the system or system components from organizational facilities for off-site maintenance, repair, or replacement;

d. Sanitize equipment to remove the following information from associated media prior to removal from organizational facilities for off-site maintenance, repair, or replacement: [Assignment: organization-defined information];

e. Check all potentially impacted controls to verify that the controls are still functioning properly following maintenance, repair, or replacement actions; and

f. Include the following information in organizational maintenance records: [Assignment: organization-defined information].

Similar​

  • Sections
    • /frameworks/nist-sp-800-53-r5/ma/02
  • Internal
    • ID: dec-c-fc0fa065

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST SP 800-53 Revision 5 β†’ πŸ’Ό MA-2 Controlled Maintenance2

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό FedRAMP Low Security Controls β†’ πŸ’Ό MA-2 Controlled Maintenance (L)(M)(H)
πŸ’Ό FedRAMP Moderate Security Controls β†’ πŸ’Ό MA-2 Controlled Maintenance (L)(M)(H)

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό MA-2(2) Automated Maintenance Activities (H)