ÑÇÖÞAV

Purpose

To provide ÑÇÖÞAV with guidance to develop and implement the appropriate protective safeguards to ensure the confidentiality, integrity, and availability of ÑÇÖÞAV assets and information.

Policy

ÑÇÖÞAV performs maintenance on the ÑÇÖÞAV system, system components and any assets providing security functionality to the system and its components. Proper maintenance is essential to the performance and availability of the ÑÇÖÞAV system.

Summary

• Schedules, performs, documents, and reviews records of maintenance and repairs on the ÑÇÖÞAV system’s components in accordance with manufacturer or vendor specifications and/or organizational requirements
• ÑÇÖÞAV approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location
• ÑÇÖÞAV approves, controls, and monitors system maintenance tools.
• Maintenance tools carried into the facility by maintenance personnel are inspected for improper or unauthorized modifications.
• ÑÇÖÞAV checks media containing diagnostic and test programs for malicious code before the media are used in the ÑÇÖÞAV system.
• ÑÇÖÞAV establishes a process for maintenance personnel authorization and maintains a list of authorized maintenance organizations and personnel
• ÑÇÖÞAV ensures that non-escorted personnel performing maintenance on the ÑÇÖÞAV system have required access authorizations
• All remote maintenance must be approved and it will be monitored

Maintenance Policy Details [pdf]