CMMC Practice MA.L2-3.7.1

Perform maintenance on organizational systems.

Bold Coast Security Guidance

This is about doing the basics with system maintenance including having a policy requiring regular maintenance to IT systems in your environment. This includes physical and logical maintenance to keep systems running smoothly and at the level of performance expected. Following manufacturers guidance is the best way to create practices, and then require those practices in your policy statements.

Security Catapult

Be prepared for CMMC

Our Q&A assessment tool is designed by security advisors for MSPs and DoD contractors of all sizes.

Try now for free

Security Catapult

Understand your gaps

See compliance gaps, compliance scores and proactive security tasks in a single interface.

Try now for free

Security Catapult

Validate NIST SP 800-171

Based on your CMMC answers, we let you know where you stand on NIST.

Try now for free

Security Catapult

Build a plan of action

Track your burn down and stay on top of security needs.

Try now for free

Security Catapult

Build your policy

Say goodbye to maintaining a security policy. We do it for you.

Try now for free

Discussion From Source

DRAFT NIST SP 800-171 R2 This requirement addresses the information security aspects of the system maintenance program and applies to all types of maintenance to any system component (including hardware, firmware, applications) conducted by any local or non-local entity. System maintenance also includes those components not directly associated with information processing and data or information retention such as scanners, copiers, and printers.