Controlled Maintenance | MA-2


  • Information Resource Custodians are responsible for scheduling, performing, documenting, and reviewing records of maintenance and repairs on information system components following manufacturer specifications.
  • Information Resource Owners or their designees should be notified of non-routine maintenance.
  • The Chief Information & Technology Officer or their designee must approve the removal of information resources or components for off-site maintenance or repairs.
  • Security related functionality should be checked to ensure proper functionality after maintenance or patching is performed.
  • Patching and other forms of maintenance to information resources must be documented.

Last updated: 3/11/2024

Contact Hours