MA.L2-3.7.3 Equipment Sanitization
Ensure equipment removed for off-site maintenance is sanitized of any CUI.
Source: NIST SP 800-171 Rev 2 3.7.3
Discussion: This requirement addresses the information security aspects of system maintenance that are performed off-site and applies to all types of maintenance to any system component (including applications) conducted by a local or nonlocal entity (e.g., in-contract, warranty, in- house, software maintenance agreement). [SP 800-88] provides guidance on media sanitization.
SPRS Score: 1