ÈÕº«Èý¼¶

Purpose

To provide ÈÕº«Èý¼¶ with guidance to develop and implement the appropriate protective safeguards to ensure the confidentiality, integrity, and availability of ÈÕº«Èý¼¶ assets and information.

Policy

ÈÕº«Èý¼¶ performs maintenance on the ÈÕº«Èý¼¶ system, system components and any assets providing security functionality to the system and its components. Proper maintenance is essential to the performance and availability of the ÈÕº«Èý¼¶ system.

Summary

• Schedules, performs, documents, and reviews records of maintenance and repairs on the ÈÕº«Èý¼¶ system’s components in accordance with manufacturer or vendor specifications and/or organizational requirements
• ÈÕº«Èý¼¶ approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location
• ÈÕº«Èý¼¶ approves, controls, and monitors system maintenance tools.
• Maintenance tools carried into the facility by maintenance personnel are inspected for improper or unauthorized modifications.
• ÈÕº«Èý¼¶ checks media containing diagnostic and test programs for malicious code before the media are used in the ÈÕº«Èý¼¶ system.
• ÈÕº«Èý¼¶ establishes a process for maintenance personnel authorization and maintains a list of authorized maintenance organizations and personnel
• ÈÕº«Èý¼¶ ensures that non-escorted personnel performing maintenance on the ÈÕº«Èý¼¶ system have required access authorizations
• All remote maintenance must be approved and it will be monitored

Maintenance Policy Details [pdf]