The university develops, disseminates, and periodically reviews/updates formal, documented procedures to facilitate the implementation of the System Maintenance policy and associated System Maintenance controls.

The University schedules, performs, documents, and reviews records of routine preventative and regular maintenance (including repairs), or software patching on the components of the information resource in accordance with manufacturer or vendor specifications and/or university and unit requirements.

The university authorizes, monitors, and controls any remotely executed (i.e. nonlocal) maintenance and diagnostic activities.

The university allows only authorized personnel to perform maintenance on university information resources.