STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 7 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← All Controls

MA-2

MaintenanceRev 3

Controlled Maintenance

CCI Identifiers (24)

CCI-000858The organization schedules, performs, documents, and reviews records of maintenance and repairs on information system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-000859The organization approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location.CCI-000860Require that organization-defines personnel or roles explicitly approve the removal of the system or system components from organizational facilities for off-site maintenance, repair, or replacement.CCI-000861Sanitize equipment to remove organization-defined information from associated media prior to removal from organizational facilities for off-site maintenance, repairs or replacement.CCI-000862Check all potentially impacted controls to verify that the controls are still functioning properly following maintenance, repair or replacement actions.CCI-002866Schedule maintenance on system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-002867The organization performs maintenance on information system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-002868Document records of maintenance on system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-002869Review records of maintenance on system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-002870Schedule repair on system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-002871The organization performs repairs on information system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-002872Document repair on system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-002873Review records of repairs on system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-002874Defines the personnel or roles who can explicitly approve the removal of the system or system components from organizational facilities for off-site maintenance, repairs or replacement.CCI-002875Include organization-defined information in organizational maintenance records.CCI-002876Defines the information to include in organizational maintenance records.CCI-004174Schedule replacement on system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-004175Document replacement on system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-004176Review records of replacement on system components in accordance with manufacturer or vendor specifications and/or organizational requirements.CCI-004177Approve all maintenance activities, whether performed on site or remotely.CCI-004178Monitor all maintenance activities, whether performed on site or remotely.CCI-004179Approve all maintenance activities, whether the system or system components are serviced on site or removed to another location.CCI-004180Monitor all maintenance activities, whether the system or system components are serviced on site or removed to another location.CCI-004181Defines the information to be removed from associated media.

Linked STIG Checks (0)

No STIG checks reference this control.