NIST SP 800-171 & CMMC 2.0 Maintenance
Schedule and perform authorized maintenance on your systems in accordance with manufacturer requirements.
-
3.7.1
Perform maintenance on organizational systems
-
3.7.2
Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance.
-
3.7.3
Ensure equipment removed for off-site maintenance is sanitized of any “Controlled Unclassified Information” (CUI).
-
3.7.4
Check media containing diagnostic and test programs for malicious code before the media are used in organizational systems.
-
3.7.5
Require multifactor authentication to establish nonlocal maintenance sessions via external network connections and terminate such connections when nonlocal maintenance is complete.
-
3.7.6
Supervise the maintenance activities of personnel without required access authorization.
Need help putting this into practice? See our NIST SP 800-171 & CMMC compliance services or read our NIST SP 800-171 & CMMC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo