Fedramp system Security Plan (ssp) High Baseline Template

Control Summary Information

Download 1.2 Mb. Page 283/478 Date 16.12.2020 Size 1.2 Mb. #54609

Navigate this page:

• MA-1 What is the solution and how is it implemented Part a
• MA-2 What is the solution and how is it implemented Part a
• Part b Part c
• Part d Part e

MA-2 Controlled Maintenance (L) (M) (H)

1. 
   Schedules, performs, documents, and reviews records of maintenance and repairs on information system components in accordance with manufacturer or vendor specifications and/or organizational requirements;
   
2. 
   Approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location;
   
3. 
   Requires that [Assignment: organization-defined personnel or roles] explicitly approve the removal of the information system or system components from organizational facilities for off-site maintenance or repairs;
   
4. 
   Sanitizes equipment to remove all information from associated media prior to removal from organizational facilities for off-site maintenance or repairs;
   
5. 
   Checks all potentially impacted security controls to verify that the controls are still functioning properly following maintenance or repair actions; and
   
6. 
   Includes [Assignment: organization-defined maintenance-related information] in organizational maintenance records.