Equipment is not available due to improper maintenance.
The organization approves, controls, and monitors information system maintenance tools.
Diagnostic equipment is available and designated for application information system software/hardware.
No statewide control
Obtain information system maintenance policy; information system maintenance tools and associated documentation; procedures addressing information system maintenance tools; maintenance records; information system media containing maintenance programs (including diagnostic and test programs); other relevant documents or records and ascertain if :
(i)the organization maintains maintenance tools on an ongoing basis.
(ii)the organization inspects all maintenance tools (e.g., diagnostic and test equipment) carried into a facility by maintenance personnel for obvious improper modifications.
(iii)the organization checks all media containing diagnostic test programs (e.g., software or firmware used for information system maintenance or diagnostics) for malicious code before the media are used in the information system.
