PR.MA-1Key Measure

Maintenance and repair of assets is performed and logged with approved tools

Protect · Maintenance

Fully Automated

Compliance Score

92%

Compliant

Documentation Maturity

4/ 5

Target: 2.5

Implementation Maturity

4/ 5

Target: 2.5

Control Description

Security patches and software updates are installed in a timely manner. A patch management process ensures all systems are kept up to date.

Microsoft Graph API Endpoints Used

GET /deviceManagement/managedDevices

Required Permissions

DeviceManagementManagedDevices.Read.All

Remediation Guidance

Enable Windows Update for Business via Intune. Configure automatic updates with a maximum 7-day deferral for quality updates. Monitor compliance in Intune. Establish emergency patching procedures for critical vulnerabilities.