Home / Maintain
Maintain
Managed control operations
Operate recurring controls without confusing implementation with independent validation.
In your situation
What the scoping will need to take into account.
Operated capacity
Keep controls alive according to a defined cadence and set responsibilities.
The mandate distinguishes between controls operated, coordinated or verified, and then retains, for each execution, the population, the result, the exception and the associated decision.
Subject of the work
Each control has a frequency, an owner and a trace.
Access and leaver reviewsControl schedulePlanned
Restoration testsExecution logsTo be executed
Vulnerability and subcontractor reviewsAssigned exceptionsTo be reviewed
Incident exercises and evidence maintenanceUpdated evidenceMaintained
How it actually unfolds
Set up a capability that remains operable over time.
Schedule for running controls, producing records, handling exceptions and periodically reviewing results.
The client provides the necessary authorities, populations and access, decides on exceptions and retains responsibilities that have not been delegated.
Inventories, procedures, expected frequencies, populations, tools, open exceptions and associated client commitments.
Each control follows its own frequency; the mandate specifies which ones are operated, coordinated or verified separately.
Operating cadence
Assign frequency, execution, review and traceability to each control.
Status maintained
The traces produced by operational cadence.
AssetControl schedule
The schedule links each control to its population, frequency, operator and review authority.
PlannedExecution logs
Each execution retains the inputs used, the result obtained, the anomalies encountered and the decision taken.
To be reviewedAssigned exceptions
Exceptions state their basis, their duration, the commitments affected and the person authorised to accept them.
MaintainedUpdated evidence
Replaced evidence remains linked to its history so it stays clear what supported the position at each deadline.
Scoping the engagement
Choose the controls to operate, coordinate or review.
The inventory of controls, their populations and their frequencies makes it possible to separate what will be operated, coordinated or reviewed within the mandate.