| Control ID |
Control Description | Data Protection Classification | ||||||
| Level 1 | Level 2 | Level 3 | Level 4 | |||||
| M-1 | Perform maintenance on organizational systems. | required | required | essential | essential | |||
| M-2 | Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance. | required | required | essential | essential | |||
| M-6 | Supervise the maintenance activities of maintenance personnel without required access authorization. | optional | recommended | essential | essential | |||