MA.L2-3.7.4 Media Inspection

CMMC Practice MA.L2-3.7.4 – Media Inspection: Check media containing diagnostic and test programs for malicious code before the media are used in organizational systems. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides...

MA.L2-3.7.3 Equipment Sanitization

CMMC Practice MA.L2-3.7.3 – Equipment Sanitization: Ensure equipment removed for off-site maintenance is sanitized of any CUI. Links to Publicly Available Resources BCWipe BCWipe is a data sanitization toolset. Carnegie Mellon University – Data...

MA.L2-3.7.6 Maintenance Personnel

CMMC Practice MA.L2-3.7.6 – Maintenance Personnel: Supervise the maintenance activities of personnel without required access authorization. Links to Publicly Available Resources Beyond Trust – 8 Steps to Reduce Remote Access Security Risks & Tighten...

MA.L2-3.7.5 Nonlocal Maintenance

CMMC Practice MA.L2-3.7.5 – Nonlocal Maintenance: Require multifactor authentication to establish nonlocal maintenance sessions via external network connections and terminate such connections when nonlocal maintenance is complete. Links to Publicly Available...

MA.L2-3.7.2 System Maintenance Control

CMMC Practice MA.L2-3.7.2 – System Maintenance Control: Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment...

MA.L2-3.7.1 Perform Maintenance

CMMC Practice MA.L2-3.7.1 – Perform Maintenance: Perform maintenance on organizational systems. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity Maturity Model...