Skip to content
ATO Pathways
  Log In

MA-4.3: Comparable Security and Sanitization

An OSCAL Control

Statement

    • (a)

      Require that nonlocal maintenance and diagnostic services be performed from a system that implements a security capability comparable to the capability implemented on the system being serviced; or

    • (b)

      Remove the component to be serviced from the system prior to nonlocal maintenance or diagnostic services; sanitize the component (for organizational information); and after the service is performed, inspect and sanitize the component (for potentially malicious software) before reconnecting the component to the system.