Appropriate, knowledgeable personnel perform maintenance through the life cycle, covering asset management including end-of-life and end-of-support, patch, vulnerability, performance and capacity management, updates, patches and monitoring of systems, servers and infrastructure, with management and maintenance staff analysing and documenting the cost of maintenance against the cost of not maintaining, third parties performing maintenance under contract where used, and maintenance roles independent of development so developers cannot reach production.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.