🔧 MA — Maintenance
Perform and control system maintenance with proper safeguards
← Back to all domains6 Practices
Perform maintenance on organizational systems
This practice requires organizations to regularly maintain their systems to ensure they operate securely and efficiently. Maintenance includes tasks l...
Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance
This control requires organizations to implement safeguards for all tools, techniques, and personnel involved in system maintenance to prevent unautho...
Ensure equipment removed for off-site maintenance is sanitized of any CUI
This control means that any equipment (like laptops, servers, or hard drives) sent to an external vendor or location for repairs or maintenance must h...
Check media containing diagnostic and test programs for malicious code before use
This practice requires organizations to scan any media (such as USB drives, CDs, or external hard drives) that contains diagnostic or test programs fo...
Require multifactor authentication to establish nonlocal maintenance sessions
This control means that any time someone needs to perform maintenance on your systems from a remote location (nonlocal), they must use multifactor aut...
Supervise the maintenance activities of personnel without required access authorization
This practice requires organizations to ensure that any maintenance activities performed by personnel who do not have the necessary access authorizati...