Â鶹´«Ã½

Purpose

To provide Â鶹´«Ã½ with guidance to develop and implement the appropriate protective safeguards to ensure the confidentiality, integrity, and availability of Â鶹´«Ã½ assets and information.

Policy

Â鶹´«Ã½ performs maintenance on the Â鶹´«Ã½ system, system components and any assets providing security functionality to the system and its components. Proper maintenance is essential to the performance and availability of the Â鶹´«Ã½ system.

Summary

• Schedules, performs, documents, and reviews records of maintenance and repairs on the Â鶹´«Ã½ system’s components in accordance with manufacturer or vendor specifications and/or organizational requirements
• Â鶹´«Ã½ approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location
• Â鶹´«Ã½ approves, controls, and monitors system maintenance tools.
• Maintenance tools carried into the facility by maintenance personnel are inspected for improper or unauthorized modifications.
• Â鶹´«Ã½ checks media containing diagnostic and test programs for malicious code before the media are used in the Â鶹´«Ã½ system.
• Â鶹´«Ã½ establishes a process for maintenance personnel authorization and maintains a list of authorized maintenance organizations and personnel
• Â鶹´«Ã½ ensures that non-escorted personnel performing maintenance on the Â鶹´«Ã½ system have required access authorizations
• All remote maintenance must be approved and it will be monitored

Maintenance Policy Details [pdf]