Topic

On-site maintenance and repairs

Applicable to

all

History

Priority

should

Jun 2024

Maintenance and repairs of IT equipment is carried out on site by an appropriately cleared technician.

References to ICT equipment were amended to IT equipment.

Dec 2021

Maintenance and repairs of ICT equipment is carried out on site by an appropriately cleared technician.

Miscellaneous changes were made to rationale and security controls throughout the publication. This included:

• A review from the Using the Information Security Manual chapter through to the Guidelines for Media chapter.

• Security controls suitable for all audiences have been identified with the ‘All’ applicability marking while additional security controls suitable for just government audiences have been identified with the O, P, S and TS applicability markings.

• Security controls suitable for specific classifications have been amended to include their classification(s) in the wording of the security controls to reduce the reliance on applicability markings to confer suitability.

• Tables in security controls have been converted into prose to allow for inclusion in the SSP annex template and the XML list of security controls.

• The use of ‘official’ and ‘highly classified’ terminology has been replaced with specific classifications to remove ambiguity.

• Security controls relating to high assurance ICT equipment have had their applicability narrowed to ‘S, TS’ reflecting that they are intended for the protection of SECRET and TOP SECRET systems and data.

Oct 2019

Maintenance and repairs of ICT equipment is carried out on-site by an appropriately cleared technician.

Security control 0305 was modified slightly.

Sep 2019

Where possible, maintenance and repairs of ICT equipment is carried out on-site by an appropriately cleared technician.

2015

Where possible, maintenance and repairs for ICT equipment should be carried out on–site byan appropriately cleared technician.

2010

Where possible, maintenance and repairs for ICT equipment containing media should be carried out on-siteby an appropriately cleared technician.

2008

Maintenance and repairs for hardware products containing classified media should be carried out on-site by an appropriately cleared technician.