NIST SP 800-171 & CMMC 2.0 Control 3.7.1 Requirement:

Perform maintenance on organizational systems

NIST SP 800-171 & CMMC 2.0 3.7.1 Requirement Explanation:

Maintenance generally refers to physical maintenance on your IT systems however it may also include firmware updates that affect the physical operation of a system. Examples include repairing workstations and updating hardware on servers to prevent downtime. Corrective maintenance includes repairing or replacing broken parts on a system. For example, replacing a cracked LCD screen on an employee's workstation. Preventative maintenance involves making changes to a system to prevent future failures. An example is to replace the hard drive on a 4-year-old server before it wears out. Adaptive maintenance involves making changes to a systems operating environment. An example is changing the air temperature in your server. Perfective maintenance is to improve the operation of your systems. An example is upgrading the RAM on a server to improve performance.

Example NIST SP 800-171 & CMMC 2.0 3.7.1 Implementation:

Perform corrective, preventative, adaptive, and perfective maintenance on your systems. Perform maintenance in accordance with manufacturer recommendations. Document and approve all maintenance conducted on your systems.

NIST SP 800-171 & CMMC 2.0 3.7.1 Scenario(s):

- Scenario 1:

A user reports that their laptop's is always hot and the fan is always running. You decide to perform preventative maintenance on the system by contacting the manufacturer to have the fan and heat sink replaced. You document this in a ticket.

Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:


Compliance Accelerator

Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.

Quantum Assessor

Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.

Supply Chain Verifier

Trust is everything. Verify, monitor, and support subcontactor compliance.