MA-7: Field Maintenance
Control Family:
Baselines:
- Low
N/A
- Moderate
N/A
- High
N/A
- Privacy
N/A
- OT Low (SP 800-82r3)
- MA-7
- OT Moderate (SP 800-82r3)
- MA-7
- OT High (SP 800-82r3)
- MA-7
Control is new to this version of the control set.
Control Statement
Restrict or prohibit field maintenance on [Assignment: organization-defined systems or system components] to [Assignment: organization-defined trusted maintenance facilities].
Supplemental Guidance
Field maintenance is the type of maintenance conducted on a system or system component after the system or component has been deployed to a specific site (i.e., operational environment). In certain instances, field maintenance (i.e., local maintenance at the site) may not be executed with the same degree of rigor or with the same quality control checks as depot maintenance. For critical systems designated as such by the organization, it may be necessary to restrict or prohibit field maintenance at the local site and require that such maintenance be conducted in trusted facilities with additional controls.
OT Discussion
Organizations identify OT systems and system components with specific calibration, maintenance, or other requirements and limit maintenance to specific facilities. Some examples may include safety-critical systems or systems involved in custody transfer where accuracy tolerances are limited and additional quality control checks are required.
OT Baseline Rationale
Rationale for adding to Low, Mod, High baselines: Some OT equipment have specific requirements for calibration, maintenance, and modification to meet regulatory or safety standards. Different deployed locations may impact the quality and precision of field maintenance.