Maintenance
That system maintenance, onsite and remote, is performed securely and never becomes a path to CUI.
The 6 requirements, in plain language.
Perform maintenance on organizational systems
Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance
Ensure equipment removed for off-site maintenance is sanitized of any CUI
Check media containing diagnostic and test programs for malicious code before the media are used in organizational systems
Require multifactor authentication to establish nonlocal maintenance sessions via external network connections and terminate such connections when nonlocal maintenance is complete
Supervise the maintenance activities of maintenance personnel without required access authorization
One owner across the whole family — built, run, and proven.
Enclave builds these controls into the boundary as code; Cadence keeps them enforced between assessments; Attest proves them to the C3PAO against every objective.
See all fourteen families →Not sure which families your contract puts in scope?
A readiness check maps your environment to all 110 controls and tells you exactly where you stand.