Through formal procedures, correctly maintain equipment to ensure their continued availability and integrity. The following control objectives must be covered in the design of these procedures:
• equipment maintenance is compliant with the supplier's recommendations;
• all repairs and services are only performed by authorized maintenance personnel;
• records are made of all faults (both suspect or actual) and maintenance (both preventative and corrective);
• care is taken when sending equipment off premises;
• compliance is ensured with all insurance policy requirements.
Regardless of ownership, management authorization is required for the use or movement of any equipment used for information processing that is outside the university's premises.