¼«ËÙÁùºÏ²Ê¿ª½±½á¹û

Purpose

To provide ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û with guidance to develop and implement the appropriate protective safeguards to ensure the confidentiality, integrity, and availability of ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û assets and information.

Policy

¼«ËÙÁùºÏ²Ê¿ª½±½á¹û performs maintenance on the ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û system, system components and any assets providing security functionality to the system and its components. Proper maintenance is essential to the performance and availability of the ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û system.

Summary

• Schedules, performs, documents, and reviews records of maintenance and repairs on the ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û system’s components in accordance with manufacturer or vendor specifications and/or organizational requirements
• ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location
• ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û approves, controls, and monitors system maintenance tools.
• Maintenance tools carried into the facility by maintenance personnel are inspected for improper or unauthorized modifications.
• ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û checks media containing diagnostic and test programs for malicious code before the media are used in the ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û system.
• ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û establishes a process for maintenance personnel authorization and maintains a list of authorized maintenance organizations and personnel
• ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û ensures that non-escorted personnel performing maintenance on the ¼«ËÙÁùºÏ²Ê¿ª½±½á¹û system have required access authorizations
• All remote maintenance must be approved and it will be monitored

Maintenance Policy Details [pdf]