MA-03(03)—Maintenance Tools | Prevent Unauthorized Removal
Moderate
>Control Description
Prevent the removal of maintenance equipment containing organizational information by:
(a) Verifying that there is no organizational information contained on the equipment;
(b) Sanitizing or destroying the equipment;
(c) Retaining the equipment within the facility; or
(d) Obtaining an exemption from ⚙organization-defined personnel or roles explicitly authorizing removal of the equipment from the facility.
>Discussion
Organizational information includes all information owned by organizations and any information provided to organizations for which the organizations serve as information stewards.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.