CMMC Practice MA.2.112: Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance.
CMMC CLARIFICATION (Ref CMMC – Appendix B)
Protect the tools used to perform maintenance. They must remain secure so they don’t introduce software viruses or other bugs into your system. Protect your maintenance processes so they aren’t used to hurt your network. Supervise the people responsible for maintenance activities. Make sure they don’t behave in a malicious manner.