# MA-06 Timely Maintenance

NIST SP 800-53 control. Family: MA Maintenance. Function: preventative. Baselines: moderate, high. Mapping licence: CC BY-SA 4.0.

Statement: Obtain maintenance support and/or spare parts for [Assignment: organization-defined system components] within [Assignment: organization-defined time period] of failure.
Guidance: Organizations specify the system components that result in increased risk to organizational operations and assets, individuals, other organizations, or the Nation when the functionality provided by those components is not operational. Organizational actions to obtain maintenance support include having appropriate contracts in place.

## Enhancements (3)
- MA-06(01) Preventive Maintenance
- MA-06(02) Predictive Maintenance
- MA-06(03) Automated Support for Predictive Maintenance
Each enhancement's statement: /api/v1/controls/MA-06?fields=enhancements

## Patterns that use it (4)
- Standard (4): SP-001 Client Module; SP-002 Server Module; SP-008 Public Web Server Pattern; SP-019 Secure Ad-Hoc File Exchange Pattern

## Clauses by framework (26 frameworks)
- iso_27001_2022: A.7.13
- iso_27002_2022: 7.13
- cobit_2019: DSS01
- nist_csf_2: ID.AM-08, PR.PS-03. OSA's own, not in NIST's crosswalk: PR.PS-03
- iso_42001_2023: A.6.2.6
- anssi: Hygiene.34, SecNumCloud.13.4
- osfi_b13: B-13.2.3, B-13.2.4
- finma_circular: IV.A(28), IV.A(29), IV.E(89)
- gdpr: Art.32(1)(d)
- dora: Art.7(1)
- bio2: 7.13
- rbi_csf: Annex1.7, ITGRCA.9
- fisc: FISC.F3
- dnb_good_practice: DNB.18.2
- cbe_csf: CTO-10
- bot_cyber: Ch10.1
- eba_ict: 3.5(a), 3.5(b)
- hipaa_sr: §164.310(a)(2)(iv)
- sebi_cscrf: PR.MA
- cmmc_2: MA
- nrc_73_54: RG5.71-B-MA
- pci_pts: K
- fca_sysc_13: SYSC 13.7.2
- hitrust_csf: 08.b
- iso_27799: H.3
- solvency_ii: EIOPA-ICT-4.8
OSA's mapping for iso_27001_2022 and nist_csf_2 takes NIST's published crosswalk as its base. A clause not marked as OSA's own is in that crosswalk.

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/MA-06
- Clauses only: /api/v1/controls/MA-06?fields=mappings
- Page for people: /controls/ma-06/