MA-03(03) Prevent Unauthorized Removal

Prevent the removal of maintenance equipment containing organizational information by:

(a) Verifying that there is no organizational information contained on the equipment;

(b) Sanitizing or destroying the equipment;

(c) Retaining the equipment within the facility; or

(d) Obtaining an exemption from ma-03.03_odp explicitly authorizing removal of the equipment from the facility.

Parameter ID Definition
ma-03.03_odp personnel or roles

Baselines

Guidance

Organizational information includes all information owned by organizations and any information provided to organizations for which the organizations serve as information stewards.

Related controls 1