Protect Standard Reference COBIT 5 BAI10.01, BAI10.02, BAI10.03, BAI10.05, APO13.01, BAI06.01, BAI01.06, APO13.01, DSS01.04, DSS05.05, BAI09.03, APO11.06, DSS04.05, DSS04.03, APO07.01, APO07.02, APO07.03, APO07.04, APO07.05 ISA 62443-3:2013 SR 7.6 ISO 27001:2013 A.6.1.5, A.14.1.1, A.14.2.1, A.14.2.5, A.12.1.2, A.12.5.1, A.12.6.2, A.14.2.2, A.14.2.3, A.14.2.4, A.12.3.1, A.17.1.2, A.17.1.3, A.18.1.3, A.11.1.4, A.11.2.1, A.11.2.2, A.11.2.3, A.8.2.3, A.8.3.1, A.8.3.2, A.11.2.7, A.16.1.6, A.16.1.1, A.17.1.1, A.17.1.2, A.17.1.3, A.12.6.1, A.18.2.2 NIST-SP-800-53 Rev. 4 CM-2, CM-3, CM-4, CM-5, CM-6, CM-7, CM-9, SA-10, SA-3, SA-4, SA-8, SA-10, SA-11, SA-12, SA-15, SA-17, PL-8, CP-4, CP-6, CP-9, PE-10, PE-12, PE-13, PE-14, PE-15, PE-18, MP-6, A-2, CA-7, CP-2, IR-8, PL-2, PM-6, AC-21, CA-7, SI-4, CP-2, IR-8, IR-3, PM-14, RA-3, RA-5, SI-2 BSI B 1.4, B 1.3, M 2.217, B 1.14, B 1.9, M 2.62, B 5.27, M 4.78, M 2.9, B 1.0, M 2.80, M 2.546, B 5.27, B 5.21, B 5.24 Table 22: PR.IP references 2.3.5 Maintenance Ensure that maintenance and repair work to components of the ICT system and/or the ICS are conducted in accordance with policies and procedures. Description Task PR.MA-1 Ensure that the operation and maintenance of, and any repairs to assets are logged. Ensure that such work is conducted promptly and uses only those means which have been tested and approved. PR.MA-2 Ensure that maintenance work on your systems that is carried out via remote access is logged. Ensure that no unauthorised access is possible. Table 23: PR.MA tasks Standard Reference COBIT 5 BAI09.03, DSS05.04, APO11.04, DSS05.02, APO13.01 ISA 62443-3:2013 ISO 27001:2013 A.11.1.2, A.11.2.4, A.11.2.5, A.15.1.1, A.15.2.1 NIST-SP-800-53 Rev. 4 MA-2, MA-3, MA-4, MA-5 BSI M 2.17, M 2.4, M 2.218, M 2.4, B 1.11, B 1.17, M 2.256 Table 24: PR.MA references Minimum ICT standard 2018 25