+MA-03(03) [M] Prevent Unauthorized Removal

MA-03(03) [M] Prevent Unauthorized Removal

Control

Prevent the removal of maintenance equipment containing organizational information by:
  1. Verifying that there is no organizational information contained on the equipment;
  2. Sanitizing or destroying the equipment;
  3. Retaining the equipment within the facility; or
  4. Obtaining an exemption from [Assignement: personnel or roles] explicitly authorizing removal of the equipment from the facility.

Discussion

Organizational information includes all information owned by organizations and any information provided to organizations for which the organizations serve as information stewards.

Assessment Objective

  1. the removal of maintenance equipment containing organizational information is prevented by verifying that there is no organizational information contained on the equipment; or
  2. the removal of maintenance equipment containing organizational information is prevented by sanitizing or destroying the equipment; or
  3. the removal of maintenance equipment containing organizational information is prevented by retaining the equipment within the facility; or
  4. the removal of maintenance equipment containing organizational information is prevented by obtaining an exemption from [Assignement: personnel or roles] explicitly authorizing removal of the equipment from the facility.

Assessment Method

Examine

Maintenance policy procedures addressing system maintenance tools system maintenance tools and associated documentation maintenance records equipment sanitization records media sanitization records exemptions for equipment removal system security plan other relevant documents or records

Interview

Organizational personnel with system maintenance responsibilities organizational personnel with information security responsibilities organizational personnel responsible for media sanitization

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by MA-03(03) [M] Prevent Unauthorized Removal – Assessment Procedure
is blocked by Prevent Unauthorized Removal