Schedule, document and review maintenance, repair and replacement of components to manufacturer or organisational requirements, approve and monitor all maintenance whether on site, remote or off site, have information security and privacy personnel explicitly approve removal of components for off-site work, sanitise equipment before it leaves the facility, check affected controls after maintenance, and record component name and serial number, date and time, work performed and the entity performing it including any escort.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.