| Control | Status | |
|---|---|---|
| Maintenance Operations | Mechanisms exist to develop, disseminate, review & update procedures to facilitate the implementation of maintenance controls across the enterprise. | |
| Controlled Maintenance | Mechanisms exist to conduct controlled maintenance activities throughout the lifecycle of the system, application or service. | |
| Timely Maintenance | Mechanisms exist to obtain maintenance support and/or spare parts for systems within a defined Recovery Time Objective (RTO). | |
| Preventative Maintenance | Mechanisms exist to perform preventive maintenance on critical systems, applications and services. | |
| Maintenance Tools | Mechanisms exist to control and monitor the use of system maintenance tools. | |
| Restrict Tool Usage | Automated mechanisms exist to restrict the use of maintenance tools to authorized maintenance personnel and/or roles. | |
| Remote Maintenance | Mechanisms exist to authorize, monitor and control remote, non-local maintenance and diagnostic activities. | |
| Remote Maintenance Cryptographic Protection | Cryptographic mechanisms exist to protect the integrity and confidentiality of remote, non-local maintenance and diagnostic communications. |