Controlled Maintenance (MA-2)
Schedule, document, and review records of maintenance, repair, and replacement on system components in accordance with manufacturer or vendor specifications and/or organizational requirements; Approve and monitor all maintenance activities, whether performed on site or remotely and whether the system or system components are serviced on site or removed to another location; Require that [organization-defined] explicitly approve the removal of the system or system components from organizational fa
Security Baselines
Why These Connect
These are equivalent or closely aligned requirements in other frameworks.
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
These related controls work together — a change to one may affect the others.
These enhancements add specific capabilities or refinements to the base control.