Applicable

(Y)es / (N)o

(C)onfidentiality

(I)ntegrity

(A)vailability

RPN

(C+I+A)

(S)atisfactory

L1

M2

H3

L1

M2

H3

L1

M2

H3

(O)ther than satisfactory +##

ma-6(2)

timely maintenance  | predictive maintenance

assessment objective:

Determine if the organization:

ma-6(2)[1]

defines information system components on which predictive maintenance is to be performed;

ma-6(2)[2]

defines time intervals within which predictive maintenance is to be performed on organization-defined information system components; and

ma-6(2)[3]

performs predictive maintenance on organization-defined information system components at organization-defined time intervals.

potential assessment methods and objects:

Examine: [select from: Information system maintenance policy; procedures addressing information system maintenance; service provider contracts; service-level agreements; security plan; maintenance records; list of system components requiring predictive maintenance; other relevant documents or records].

Interview: [select from: Organizational personnel with information system maintenance responsibilities; organizational personnel with information security responsibilities; system/network administrators].

Test: [select from: Organizational processes for predictive maintenance; automated mechanisms supporting and/or implementing predictive maintenance].