Assessment Objective
Determine if:
- MA-06(01) preventive maintenance is performed on [Assignment: system components] at [Assignment: time intervals].
Assessment Methods
Examine
- Maintenance policy
- procedures addressing system maintenance
- service provider contracts
- service-level agreements
- maintenance records
- list of system components requiring preventive maintenance
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Organizational processes for preventive maintenance
- mechanisms supporting and/or implementing preventive maintenance
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | MA-06(01) Preventive Maintenance |