Definition
Maintenance Equipment
In the context of this directive, maintenance equipment refers to any tools, devices, or resources used to perform maintenance activities on IT systems.
Maintenance equipment does not, in the context of this directive, include physical tools or devices that have no logical processing capability, and which do not interface with information systems.
Directive (MA-1 Maintenance)
GNB shall establish, implement, and maintain a formal system maintenance directive to ensure that maintenance activities, both onsite and remote, are performed securely, authorized appropriately, and controlled to protect the confidentiality, integrity, and availability of organizational information systems.
Purpose
This directive establishes the governance required to ensure maintenance is performed in a secure, controlled, and auditable manner, reducing the risk of unauthorized access, system compromise, or operational disruption.
The objective of the Maintenance Directive is to ensure:
- a standardized approach is used for periodic and timely maintenance of information systems, system components, or system services
- adequate tools, techniques, and personnel are provided to conduct maintenance
