MA.L2-3.7.1—Perform Maintenance
Level 2
800-171: 3.7.1
>Control Description
Perform maintenance on organizational systems.
>Cross-Framework Mappings
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What is your system maintenance policy and schedule?
- •How do you plan and approve maintenance activities?
- •Who is responsible for overseeing maintenance activities?
- •What is your process for emergency maintenance versus planned maintenance?
- •How do you document maintenance activities performed?
Technical Implementation:
- •What tools track maintenance schedules and activities?
- •What CMDB or asset management system tracks maintenance?
- •What logging captures maintenance activities?
- •What tools support maintenance ticketing and tracking?
- •How do you technically verify maintenance was performed?
Evidence & Documentation:
- •What maintenance procedures and schedules can you provide?
- •What maintenance records and work orders demonstrate maintenance activities?
- •What sanitization certificates show equipment was sanitized before off-site maintenance?
- •What remote maintenance session logs can you show?
- •What tool inventory lists approved maintenance tools?
- •What evidence shows maintenance personnel are properly supervised or vetted?
Ask AI
Configure your API key to use AI features.