# MA-07 Field Maintenance

NIST SP 800-53 control. Family: MA Maintenance. Function: preventative. In no baseline. Mapping licence: CC BY-SA 4.0.

Statement: Restrict or prohibit field maintenance on [Assignment: organization-defined systems or system components] to [Assignment: organization-defined trusted maintenance facilities].
Guidance: Field maintenance is the type of maintenance conducted on a system or system component after the system or component has been deployed to a specific site (i.e., operational environment). In certain instances, field maintenance (i.e., local maintenance at the site) may not be executed with the same degree of rigor or with the same quality control checks as depot maintenance. For critical systems designated as such by the organization, it may be necessary to restrict or prohibit field maintenance at the local site and require that such maintenance be conducted in trusted facilities with additional controls.

## Clauses by framework (12 frameworks)
- iso_27001_2022: A.7.13. OSA's own, not in NIST's crosswalk: A.7.13
- iso_27002_2022: 7.13
- cobit_2019: DSS01
- bsi_grundschutz: OPS.1.2.5
- anssi: Hygiene.28, SecNumCloud.13.4
- finma_circular: IV.A(28)
- dora: Art.7(1)
- bio2: 7.13
- rbi_csf: Annex1.7
- fisc: FISC.F3
- cmmc_2: MA
- fca_sysc_13: SYSC 13.7.2
OSA's mapping for iso_27001_2022 takes NIST's published crosswalk as its base. A clause not marked as OSA's own is in that crosswalk.

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/MA-07
- Clauses only: /api/v1/controls/MA-07?fields=mappings
- Page for people: /controls/ma-07/
- Found an error? Open an issue at https://github.com/opensecurityarchitecture/osa-data/issues with the id, what OSA says and what the source says.