CMMC Practice - MA.2.111

Perform maintenance on organizational systems

CMMC Practice - MA.2.112

Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance.

CMMC Practice - MA.2.113

Require multifactor authentication to establish nonlocal maintenance sessions via external network connections and terminate such connections when nonlocal maintenance is complete.

CMMC Practice - MA.2.114

Supervise the maintenance activities of personnel without required access authorization.

CMMC Practice - MA.3.115

Ensure equipment removed for off-site maintenance is sanitized of any “Controlled Unclassified Information” (CUI).

CMMC Practice - MA.3.116

Check media containing diagnostic and test programs for malicious code before the media are used in organizational systems.