The organisation schedules, documents and reviews maintenance, repair and replacement of system components per vendor specifications or organisational requirements; approves and monitors all maintenance on or off site; requires defined roles to approve removal of components for off-site maintenance; sanitizes defined information from media before removal; checks all potentially affected controls after maintenance; and records defined information in maintenance records. 2 enhancements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.