Overview
Maintenance support for key IT assets is available to respond within 24 hours of failure.
Threat
Mission-essential systems require maintenance support to be available within 24 hours of a system failure to ensure minimal disruption of operations. Establishing a clear MOA or service contract with the responsible maintenance organization or vendor, as well as inventory control for critical items, is essential to maintaining operations.
Guidance
1. Ensure that maintenance support for key IT assets shall be available to respond within 24 hours of system failure by implementing a service agreement stipulating such availability
2. Verify that the maintenance support service agreement specifies availability of maintenance support within 24 hours after a system failure.
DoD classifies this control in the subject area of “Continuity” with a impact of “Low”.