Navigate

CCI-002881

CCI-002881 Definition

The organization prevents the unauthorized removal of maintenance equipment containing organizational information by obtaining an exemption from organization-defined personnel or roles explicitly authorizing removal of the equipment from the facility.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Compelling Evidence

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002881.

Control	Description
MA-3 (3)	The organization prevents the unauthorized removal of maintenance equipment containing organizational information by: MA-3 (3)(a): Verifying that there is no organizational information contained on the equipment; MA-3 (3)(b): Sanitizing or destroying the equipment; MA-3 (3)(c): Retaining the equipment within the facility; or MA-3 (3)(d): Obtaining an exemption from [Assignment: organization-defined personnel or roles] explicitly authorizing removal of the equipment from the facility.

Control

Description

MA-3 (3)

The organization prevents the unauthorized removal of maintenance equipment containing organizational information by:

MA-3 (3)(a): Verifying that there is no organizational information contained on the equipment;

MA-3 (3)(b): Sanitizing or destroying the equipment;

MA-3 (3)(c): Retaining the equipment within the facility; or

MA-3 (3)(d): Obtaining an exemption from [Assignment: organization-defined personnel or roles] explicitly authorizing removal of the equipment from the facility.