CCI-002900

Defines time intervals at which to perform preventive maintenance on organization-defined system components.

Implementation Guidance

Determine if preventive maintenance is performed on [MA-06(01)_ODP[01]; system components on which preventive maintenance is to be performed are defined] at [MA-06(01)_ODP[02]; time intervals within which preventive maintenance is to be performed on system components are defined].

Validation Procedures

Examine: [SELECT FROM: Maintenance policy; procedures addressing system maintenance; service provider contracts; service-level agreements; maintenance records; list of system components requiring preventive maintenance; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system maintenance responsibilities; organizational personnel with information security responsibilities; system/network administrators]. Test: [SELECT FROM: Organizational processes for preventive maintenance; mechanisms supporting and/or implementing preventive maintenance].

The controls below (if any) were marked by NIST as being related to CCI-002900.