6VµçÓ°Íø

Purpose

To provide 6VµçÓ°Íø with guidance to develop and implement the appropriate protective safeguards to ensure the confidentiality, integrity, and availability of 6VµçÓ°Íø assets and information.

Policy

6VµçÓ°Íø performs maintenance on the 6VµçÓ°Íø system, system components and any assets providing security functionality to the system and its components. Proper maintenance is essential to the performance and availability of the 6VµçÓ°Íø system.

Summary

• Schedules, performs, documents, and reviews records of maintenance and repairs on the 6VµçÓ°Íø system’s components in accordance with manufacturer or vendor specifications and/or organizational requirements
• 6VµçÓ°Íø approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location
• 6VµçÓ°Íø approves, controls, and monitors system maintenance tools.
• Maintenance tools carried into the facility by maintenance personnel are inspected for improper or unauthorized modifications.
• 6VµçÓ°Íø checks media containing diagnostic and test programs for malicious code before the media are used in the 6VµçÓ°Íø system.
• 6VµçÓ°Íø establishes a process for maintenance personnel authorization and maintains a list of authorized maintenance organizations and personnel
• 6VµçÓ°Íø ensures that non-escorted personnel performing maintenance on the 6VµçÓ°Íø system have required access authorizations
• All remote maintenance must be approved and it will be monitored

Maintenance Policy Details [pdf]