Maintenance (MA)

The Maintenance (MA) family groups security controls that govern how an information system is serviced, repaired, and updated, requiring scheduled, authorized, and documented maintenance activities. It covers the protection of maintenance tools, remote maintenance sessions, and the monitoring and reporting of maintenance actions to ensure system integrity and security.