MA.L2-3.7.1
MA.L2-3.7.1: System Maintenance
Perform maintenance on organizational systems.
MA.L2-3.7.2
MA.L2-3.7.2: Maintenance Tools
Control and inspect tools used during maintenance to ensure they don't introduce malicious code or compromise system security.
MA.L2-3.7.3
MA.L2-3.7.3: Equipment Sanitization
Sanitize equipment containing CUI before removal from your facility for maintenance or repairs to prevent data exposure.
MA.L2-3.7.4
MA.L2-3.7.4: Media Inspection
Inspect media (drives, tapes, USB devices) used for maintenance or storage with diagnostic tools to detect malicious code.
MA.L2-3.7.5
MA.L2-3.7.5: Nonlocal Maintenance
Require multi-factor authentication (MFA) for any remote access by vendors or support personnel for maintenance purposes.
MA.L2-3.7.6
MA.L2-3.7.6: Maintenance Personnel
Supervise maintenance and repair activities performed by unauthorized or external personnel to prevent unauthorized system access.