An error occurred:

© 2024 Xylok, LLC

Version: v2024.12.1-0560-0560

Navigate

MA-2(2)

MA-2(2): Automated Maintenance Activities

The organization:

(a): Employs automated mechanisms to schedule, conduct, and document maintenance and repairs; and

(b): Produces up-to date, accurate, and complete records of all maintenance and repair actions requested, scheduled, in process, and completed.

Supplemental

CIA Levels
Confidentiality	high
Integrity	high
Availability	high

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to MA-2(2).

Control

Description

The organization develops a continuous monitoring strategy and implements a continuous monitoring program that includes:

a: Establishment of [organization-defined metrics] to be monitored;

b: Establishment of [organization-defined frequencies] for monitoring and [organization-defined frequencies] for assessments supporting such monitoring;

c: Ongoing security control assessments in accordance with the organizational continuous monitoring strategy;

d: Ongoing security status monitoring of organization-defined metrics in accordance with the organizational continuous monitoring strategy;

e: Correlation and analysis of security-related information generated by assessments and monitoring;

f: Response actions to address results of the analysis of security-related information; and

g: Reporting the security status of organization and the information system to [organization-defined personnel or roles] [organization-defined frequency].

The organization approves, controls, and monitors information system maintenance tools.

Enhancements

The controls below (if any) add on to the requirements of MA-2(2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to MA-2(2).

CCI	Definition
CCI-002863	The organization employs automated mechanisms to schedule, conduct, and document repairs.
CCI-002864	Produce up-to date, accurate, and complete records of all maintenance requested, scheduled, in process, and completed.
CCI-002865	Produce up-to date, accurate, and complete records of all repair actions requested, scheduled, in process, and completed.
CCI-002905	The organization employs automated mechanisms to schedule, conduct, and document maintenance.