MA.L2-3.7.1
Perform Maintenance
Source and approval
CMMC Assessment Guide — Level 2 · Revision 2.13
Publisher approved · Complete cited source edition 2026-10-31
Read the official guideSee MA.L2-3.7.1 in the reference catalog with its NIST cross-references
Official requirement
Perform maintenance on organizational systems.
Assessment objectives
a. system maintenance is performed.
Implementation guidance
Editorial examples to help you plan. Adapt them to your environment; the official requirement and objectives remain authoritative.
In plain language
Perform maintenance on organizational systems.
Implementation example
Example from the source assessment guide (not a mandatory implementation): You are responsible for maintenance activities on your company ’s machines. This includes regular planned maintenance, unscheduled maintenance, reconfigurations when requ ired, and damage repairs [a]. You know that failing to conduct maintenance activities can impact system security and availability, so you ensure that maintenance is regularly performed. You track all maintenance performed to assist with troubleshooting later if needed.
Evidence examples
Examples suggested by the source guide (not an exhaustive or mandatory checklist): System maintenance policy; procedures addressing controlled system maintenance; maintenance records; manufacturer or vendor maintenance specifications; equipment sanitiz ation records; media sanitization records; system security plan; other relevant documents or records
Common mistakes
Waiting for systems to fail rather than following the defined maintenance process.