Skip to main content

💼 MA-2 CONTROLLED MAINTENANCE

  • ID: /frameworks/nist-sp-800-53-r4/ma/02

Stats​

not available

Description​

The organization: MA-2a. Schedules, performs, documents, and reviews records of maintenance and repairs on information system components in accordance with manufacturer or vendor specifications and/or organizational requirements; MA-2b. Approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location; MA-2c. Requires that [Assignment: organization-defined personnel or roles] explicitly approve the removal of the information system or system components from organizational facilities for off-site maintenance or repairs; MA-2d. Sanitizes equipment to remove all information from associated media prior to removal from organizational facilities for off-site maintenance or repairs; MA-2e. Checks all potentially impacted security controls to verify that the controls are still functioning properly following maintenance or repair actions; and MA-2f. Includes [Assignment: organization-defined maintenance-related information] in organizational maintenance records.

Similar​

  • Internal
    • ID: dec-c-a440dcaa

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST CSF v1.1 → 💼 PR.MA-1: Maintenance and repair of organizational assets are performed and logged, with approved and controlled toolsno data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 MA-2 (1) RECORD CONTENTno data
💼 MA-2 (2) AUTOMATED MAINTENANCE ACTIVITIESno data