É«ÖÐÉ«

Purpose

To provide É«ÖÐÉ« with guidance to develop and implement the appropriate protective safeguards to ensure the confidentiality, integrity, and availability of É«ÖÐÉ« assets and information.

Policy

É«ÖÐÉ« performs maintenance on the É«ÖÐÉ« system, system components and any assets providing security functionality to the system and its components. Proper maintenance is essential to the performance and availability of the É«ÖÐÉ« system.

Summary

• Schedules, performs, documents, and reviews records of maintenance and repairs on the É«ÖÐÉ« system’s components in accordance with manufacturer or vendor specifications and/or organizational requirements
• É«ÖÐÉ« approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location
• É«ÖÐÉ« approves, controls, and monitors system maintenance tools.
• Maintenance tools carried into the facility by maintenance personnel are inspected for improper or unauthorized modifications.
• É«ÖÐÉ« checks media containing diagnostic and test programs for malicious code before the media are used in the É«ÖÐÉ« system.
• É«ÖÐÉ« establishes a process for maintenance personnel authorization and maintains a list of authorized maintenance organizations and personnel
• É«ÖÐÉ« ensures that non-escorted personnel performing maintenance on the É«ÖÐÉ« system have required access authorizations
• All remote maintenance must be approved and it will be monitored

Maintenance Policy Details [pdf]