MA - Maintenance (Level 2)

The Level 2 Maintenance domain of the CMMC 2.0 requires organizations to establish documented procedures for ongoing system upkeep, including timely patch management, configuration control, and routine vulnerability remediation. It emphasizes consistent application of maintenance activities, verification of corrective actions, and evidence of compliance to sustain the security posture of covered assets.