A.7.13
    Physical Controls

    Equipment maintenance

    Equipment should be correctly maintained to ensure availability, integrity and confidentiality of information.

    Purpose

    To ensure continued availability and integrity of information processing facilities.

    Implementation Guidance

    Maintain equipment according to manufacturer specifications

    Keep records of all maintenance activities

    Use authorized maintenance personnel only

    Sanitize equipment before maintenance if necessary

    Inspect equipment after maintenance

    Recommended Tools

    ISO 27001 Services from the Directory

    These providers can help you implement A.7.13 and achieve ISO 27001 certification.

    By the team behind ISMS Directory

    Implementing A.7.13 for a client?

    ISMS Copilot drafts policies, evidence, and SoA wording for A.7.13 Equipment maintenance. Built for compliance professionals.

    Try ISMS Copilot free