MA-3(3)

  • Requirement

    Prevent the removal of maintenance equipment containing organizational information by:

    1. Verifying that there is no organizational information contained on the equipment;
    2. Sanitizing or destroying the equipment;
    3. Retaining the equipment within the facility; or
    4. Obtaining an exemption from [Assignment: organization-defined personnel or roles] explicitly authorizing removal of the equipment from the facility.
  • Discussion

    Organizational information includes all information owned by organizations and any information provided to organizations for which the organizations serve as information stewards.

More Info

  • Title

    Maintenance Tools | Prevent Unauthorized Removal
  • Family

    Maintenance
  • NIST 800-53B Baseline(s)

    • Moderate
    • High
  • Related NIST 800-53 ID

    MP-6

NIST 800-53A Assessment Guidance

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!