Maintenance (03.08)

Maintenance (03.08) requires that organizations perform system maintenance only by approved personnel, using approved tools, and in a manner that protects controlled unclassified information from loss, alteration, or disclosure. It mandates documented procedures, monitoring of maintenance activities, and proper disposal or sanitization of maintenance equipment after use.