NIST 800-53 REV 5 • MAINTENANCE
MA-2(1) — Record Content
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Practitioner Notes
This enhancement specifies what information your maintenance records should contain. Good records protect you during audits and help you track the health of your systems over time.
Example 1: In your CMDB or maintenance tracking system, require the following fields for every maintenance record: date and time, system or component name, type of maintenance (preventive, corrective, emergency), technician name, description of work, parts used, and supervisor approval.
Example 2: Create a standardized maintenance record template in Word or SharePoint that technicians fill out for every maintenance action. Include checkboxes for common activities (firmware update, hardware replacement, configuration change) and a free-text field for details. Archive completed forms in a compliance folder organized by date.