← Controls / MA

MA-06 Timely Maintenance

Maintenance

Moderate High

Description

Obtain maintenance support and/or spare parts for [Assignment: organization-defined system components] within [Assignment: organization-defined time period] of failure.

Supplemental Guidance

Organizations specify the system components that result in increased risk to organizational operations and assets, individuals, other organizations, or the Nation when the functionality provided by those components is not operational. Organizational actions to obtain maintenance support include having appropriate contracts in place.

Enhancements (3)

What NIST adds to this control. Select one to read its statement.

MA-06(01) Preventive Maintenance

Perform preventive maintenance on [Assignment: organization-defined system components] at [Assignment: organization-defined time intervals].

MA-06(02) Predictive Maintenance

Perform predictive maintenance on [Assignment: organization-defined system components] at [Assignment: organization-defined time intervals].

MA-06(03) Automated Support for Predictive Maintenance

Transfer predictive maintenance data to a maintenance management system using [Assignment: organization-defined automated mechanisms].

Patterns that use this control (4)

Grouped by the emphasis each pattern gives it.

Compliance Mappings

ISO 27001:2022

A.7.13

ISO 27002:2022

7.13

COBIT 2019

DSS01

NIST CSF 2.0

ID.AM-08PR.PS-03

ISO 42001:2023

A.6.2.6

ANSSI

Hygiene.34SecNumCloud.13.4

FINMA Circular 2023/1

IV.A(28)IV.A(29)IV.E(89)

OSFI B-13

B-13.2.3B-13.2.4

EU GDPR

Art.32(1)(d)

EU DORA

Art.7(1)

BIO2

7.13

RBI CSF

Annex1.7ITGRCA.9

FISC Security Guidelines

FISC.F3

DNB Good Practice

DNB.18.2

CBE CSF

CTO-10

HIPAA Security Rule

§164.310(a)(2)(iv)

EBA ICT Guidelines

3.5(a)3.5(b)

SEBI CSCRF

PR.MA

BOT Cyber Resilience

Ch10.1

CMMC 2.0

MA

10 CFR 73.54

RG5.71-B-MA

PCI PTS v6

K

Solvency II

EIOPA-ICT-4.8

FCA SYSC 13

SYSC 13.7.2

HITRUST CSF v11

08.b

ISO 27799

H.3

ISO 17799 (legacy)

None.

COBIT 4.1 (legacy)

None.