CMMC Practice MA.L2-3.7.1

Perform Maintenance: Perform maintenance on organizational systems.

Monarch ISC Guidance

This is about doing the basics with system maintenance including having a policy requiring regular maintenance to IT systems in your environment. This includes physical and logical maintenance to keep systems running smoothly and at the level of performance expected. Following manufacturers guidance is the best way to create practices, and then require those practices in your policy statements.

Discussion From Source

NIST SP 800-171 R2 This requirement addresses the information security aspects of the system maintenance program and applies to all types of maintenance to any system component (including hardware, firmware, applications) conducted by any local or nonlocal entity. System maintenance also includes those components not directly associated with information processing and data or information retention such as scanners, copiers, and printers.

References