HOME

MA-3 (3)

MA-3 (3) H M
Description

The organization prevents the unauthorized removal of maintenance equipment containing organizational information by:
(a) Verifying that there is no organizational information contained on the equipment;
(b) Sanitizing or destroying the equipment;
(c) Retaining the equipment within the facility; or
(d) Obtaining an exemption from [Assignment: organization-defined personnel or roles] explicitly authorizing removal of the equipment from the facility.

FedRAMP
  • H MA-3 (3) (d) [the information owner explicitly authorizing removal of the equipment from the facility]
  • M MA-3 (3) (d) [the information owner explicitly authorizing removal of the equipment from the facility]
DISA Cloud Computing SRG

d. Not appropriate for DoD to define for all CSP's infrastructure or service offerings

Source:
DoD RMF TAG

Supplemental Guidance

Organizational information includes all information specifically owned by organizations and information provided to organizations in which organizations serve as information stewards.