MA-3(3)
-
Requirement
Prevent the removal of maintenance equipment containing organizational information by:
- Verifying that there is no organizational information contained on the equipment;
- Sanitizing or destroying the equipment;
- Retaining the equipment within the facility; or
- Obtaining an exemption from [Assignment: organization-defined personnel or roles] explicitly authorizing removal of the equipment from the facility.
-
Discussion
Organizational information includes all information owned by organizations and any information provided to organizations for which the organizations serve as information stewards.
NIST 800-53A Assessment Guidance
CMMC Training
Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!