CCI-000903

The organization obtains maintenance support and/or spare parts for organization-defined information system components within an organization-defined time period of failure.

Implementation Guidance

The organization being inspected/assessed obtains maintenance support and/or spare parts for information system components defined in MA-6, CCI 2896 within 24 hours (Low and Moderate Availability) or immediately upon failure for (High Availability). DoD has defined the time period as within 24 hours (Low and Moderate Availability) or immediately upon failure for (High Availability).

Validation Procedures

The organization conducting the inspection/assessment obtains evidence that maintenance support is available for information system components defined in MA-6, CCI 2896 and that the support will be provided within 24 hours (Low and Moderate Availability) or immediately upon failure for (High Availability). Evidence can include maintenance support contracts, inventories of spare parts, etc. DoD has defined the time period as within 24 hours (Low and Moderate Availability) or immediately upon failure for (High Availability).

Compelling Evidence

1.) Maintenance support contracts, inventories of spare parts, etc.

The controls below (if any) were marked by NIST as being related to CCI-000903.