Navigate

MA-3 (3)

MA-3 (3): Prevent Unauthorized Removal

The organization prevents the unauthorized removal of maintenance equipment containing organizational information by:

MA-3 (3)(a): Verifying that there is no organizational information contained on the equipment;

MA-3 (3)(b): Sanitizing or destroying the equipment;

MA-3 (3)(c): Retaining the equipment within the facility; or

MA-3 (3)(d): Obtaining an exemption from [Assignment: organization-defined personnel or roles] explicitly authorizing removal of the equipment from the facility.

Supplemental

Organizational information includes all information specifically owned by organizations and information provided to organizations in which organizations serve as information stewards.

CIA Levels
Confidentiality	low
Integrity	unknown
Availability	unknown

Overlays
Classified, Int-A, Int-B, Int-C

Related Controls

The controls below (if any) were marked by NIST as being related to MA-3 (3).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of MA-3 (3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to MA-3 (3).

CCI	Definition
CCI-000871	The organization prevents the unauthorized removal of maintenance equipment containing organizational information by: (a) verifying that there is no organizational information contained on the equipment; (b) sanitizing or destroying the equipment; (c) retaining the equipment within the facility; or (d) obtaining an exemption from organization-defined personnel or roles explicitly authorizing removal of the equipment from the facility.
CCI-002877	The organization prevents the unauthorized removal of maintenance equipment containing organizational information by verifying that there is no organizational information contained on the equipment.
CCI-002878	The organization prevents the unauthorized removal of maintenance equipment containing organizational information by sanitizing or destroying the equipment.
CCI-002879	The organization prevents the unauthorized removal of maintenance equipment containing organizational information by retaining the equipment within the facility.
CCI-002880	The organization prevents the unauthorized removal of maintenance equipment containing organizational information by retaining the equipment within the facility.
CCI-002881	The organization prevents the unauthorized removal of maintenance equipment containing organizational information by obtaining an exemption from organization-defined personnel or roles explicitly authorizing removal of the equipment from the facility.
CCI-002882	The organization defines the personnel or roles who can provide an exemption that explicitly authorizes removal of equipment from the facility.