CMMC Practice Requirement:
Perform maintenance on organizational systems
CMMC Requirement Explanation:
Maintenance generally refers to physical maintenance on your IT systems however it may also include firmware updates that affect the physical operation of a system. Examples include repairing workstations and updating hardware on servers to prevent downtime. Corrective maintenance includes repairing or replacing broken parts on a system. For example, replacing a cracked LCD screen on an employees workstation. Preventative maintenance involves making changes to a system to prevent it from failing in the future. An example is replace the hard drive on a 4 year old server before it wears out. Adaptive maintenance involves making changes to a systems operating environment. An example is changing the air temperature in your server. Perfective maintenance is to improve the operation of your systems. An example is upgrading the RAM on a server to improve performance.
Example CMMC Implementation:
Perform corrective, preventative, adaptive, and perfective maintenance on your systems. Perform maintenance in accordance with manufacturer recommendations. Document all maintenance conducted on your systems.
- Scenario 1:
A user reports that their laptop's is always hot and the fan is always running. You decide to perform preventative maintenance on the system by contacting the manufacturer to have the fan and heat sink replaced. You document this in a ticket.
Discover Our NIST SP 800-171 Solutions:
For contractors seeking compliance
For IT service providers
Supply Chain Verifier
For contractors seeking to verify partner compliance