MA.L2-3.7.2  

Reference: CMMC 2.11

Family: MA

Level Introduced: 2

Title: System Maintenance Control

Practice:
Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance.

CMMC Clarification:
Protect the tools used to perform maintenance. They must remain secure so they don't introduce software viruses or other bugs into your system. Protect your maintenance processes so they aren't used to hurt your network. Supervise the people responsible for maintenance activities. Make sure they don't behave in a malicious manner.

Example
You are responsible for maintenance activities on your company's machines. These activities can introduce software viruses or bugs into your system. To prevent this, make sure your maintenance tools protect from unauthorized access. Also, confirm that your organization manages or supervises everyone assigned to perform maintenance.

Source: CMMC v2.0