Maintenance Policy

Purpose

To provide Â鶹ӰÊÓ with guidance to develop and implement the appropriate protective safeguards to ensure the confidentiality, integrity, and availability of Â鶹ӰÊÓ assets and information.

Policy

Â鶹ӰÊÓ performs maintenance on the Â鶹ӰÊÓ system, system components and any assets providing security functionality to the system and its components. Proper maintenance is essential to the performance and availability of the Â鶹ӰÊÓ system.

Summary

  • Schedules, performs, documents, and reviews records of maintenance and repairs on the Â鶹ӰÊÓ system’s components in accordance with manufacturer or vendor specifications and/or organizational requirements
  • Â鶹ӰÊÓ approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location
  • Â鶹ӰÊÓ approves, controls, and monitors system maintenance tools.
  • Maintenance tools carried into the facility by maintenance personnel are inspected for improper or unauthorized modifications.
  • Â鶹ӰÊÓ checks media containing diagnostic and test programs for malicious code before the media are used in the Â鶹ӰÊÓ system.
  • Â鶹ӰÊÓ establishes a process for maintenance personnel authorization and maintains a list of authorized maintenance organizations and personnel
  • Â鶹ӰÊÓ ensures that non-escorted personnel performing maintenance on the Â鶹ӰÊÓ system have required access authorizations
  • All remote maintenance must be approved and it will be monitored

Maintenance Policy Details [pdf]