MA-3(3) Prevent Unauthorized Removal

Control statement

Prevent the removal of maintenance equipment containing organizational information by:
    (a) Verifying that there is no organizational information contained on the equipment;
    (b) Sanitizing or destroying the equipment;
    (c) Retaining the equipment within the facility; or
    (d) Obtaining an exemption from {{ insert: param, ma-03.03_odp }} explicitly authorizing removal of the equipment from the facility.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

No 20x Key Security Indicators map to this control in the current catalog version.