// ITSP.10.171 · FAMILY 07 · 3 REQUIREMENTS

Maintenance

Last verified: 2026-10-05

// REQUIREMENTS

IdentifierRequirementLevel 1
03.07.04 Maintenance tools
03.07.05 Non-local maintenance
03.07.06 Maintenance personnel

// INTENT

Control who services the systems, with what tools, from where.

// WHAT A FIRST ASSESSMENT FINDS

The MSP's whole bench has a remote tool on every machine, and the photocopier technician has had a network drop for years.

// THE WORK

Scope who may service what, route remote access through a jump host, record support sessions, and sanitize equipment before it leaves for repair. Your photocopier tech and your MSP both count.

// HOW WE CAN INTERPRET IT

// TEMPLATES FOR THIS FAMILY

References

  1. Protecting specified information in non-Government of Canada systems and organizations (ITSP.10.171)April 2025, updated October 2025
    Canadian Centre for Cyber Securitycyber.gc.ca
  2. NIST SP 800-171 Revision 3, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsRevision 3
    NISTcsrc.nist.gov

Outbound links open in a new tab. Source-pinned. If a vendor moves a doc, this block gets updated.