This objective confirms that the maintenance controls identified and documented in previous objectives (MA.L2-3.7.2[a–b]) are actually in place and functioning. It focuses on whether your organization is following its defined procedures to manage risk during system maintenance activities.