Requirement

Equipment maintenance and safety

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Fulfill this requirement by completing the tasks below ->
Equipment maintenance and safety
This requirement is part of the framework:  

Other requirements of the framework

No items found.
0
Equipment maintenance and safety
No items found.
Physical security
Best practices
How to implement:
Equipment maintenance and safety

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Read below what concrete actions you can take to improve this ->
Physical security
Equipment maintenance and safety
Frameworks that include requirements for this topic:
Lov om digital sikkerhet (Norge)
Sikkerhetsloven (Norge)
Cybersikkerhedsloven (Danmark)
CER Directive
Avviż Legali 71 tal-2025 (Malta)
Закон за прилагане на NIS2 (България)

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to
Equipment maintenance and safety
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
Maintenance of assets
Critical
High
Normal
Low
1
requirements
Physical security
Equipment maintenance and safety

Maintenance of assets

This task helps you comply with the following requirements

No items found.
Security controls for ICT assets
Critical
High
Normal
Low
1
requirements
Physical security
Equipment maintenance and safety

Security controls for ICT assets

This task helps you comply with the following requirements

No items found.
Disposal of media and hardware
Critical
High
Normal
Low
1
requirements
Physical security
Equipment maintenance and safety

Disposal of media and hardware

This task helps you comply with the following requirements

No items found.
Process for reviewing and approving hardware before deployment
Critical
High
Normal
Low
1
requirements
Physical security
Equipment maintenance and safety

Process for reviewing and approving hardware before deployment

This task helps you comply with the following requirements

ID.RA-09: Reviewing hardware and softwareNIST 2.0
Regular updating and maintenance of hardware
Critical
High
Normal
Low
2
requirements
Physical security
Equipment maintenance and safety

Regular updating and maintenance of hardware

This task helps you comply with the following requirements

PR.PS-03: Hardware managementNIST 2.0
§ 10.f: Systemutvikling og vedlikeholdNIS2 NO
Secure usage of maintenance tools and portable devices for organization's systems
Critical
High
Normal
Low
1
requirements
Physical security
Equipment maintenance and safety

Secure usage of maintenance tools and portable devices for organization's systems

This task helps you comply with the following requirements

PR.MA-1: Maintenance and repair of organizational assets are performed and logged, with approved and controlled tools.CyberFundamentals
Handling the loss, misuse, damage and theft of assets
Critical
High
Normal
Low
2
requirements
Physical security
Equipment maintenance and safety

Handling the loss, misuse, damage and theft of assets

This task helps you comply with the following requirements

PR.DS-3: Assets are formally managed throughout removal, transfers, and disposition.CyberFundamentals
Setting up and resourcing backup equipment
Critical
High
Normal
Low
3
requirements
Physical security
Equipment maintenance and safety

Setting up and resourcing backup equipment

This task helps you comply with the following requirements

Article 12: Backup policies and procedures, restoration and recovery procedures and methodsDORA
PR.DS-11: Backup policyNIST 2.0
PR.IR-04: Resource capacityNIST 2.0
Basic service testing, fault tolerance evaluation and verification
Critical
High
Normal
Low
15
requirements
Physical security
Equipment maintenance and safety

Basic service testing, fault tolerance evaluation and verification

This task helps you comply with the following requirements

Toiminnan jatkuvuuden hallintaKatakri
F08: Toiminnan jatkuvuuden varmistaminenKatakri
11.2.2: Supporting utilitiesISO 27001
11.1.4: Protecting against external and environmental threatsISO 27001
PR.IP-5: Physical operating environmentNIST
VAR-08: VikasietoisuusJulkri
8.14: Redundancy of information processing facilitiesISO 27001
7.5: Protecting against physical and environmental threatsISO 27001
7.11: Supporting utilitiesISO 27001
A1.2: Recovery of infrastructure according to objectivesSOC 2
Ensuring the quality of equipment maintenance
Critical
High
Normal
Low
7
requirements
Physical security
Equipment maintenance and safety

Ensuring the quality of equipment maintenance

This task helps you comply with the following requirements

F04: Kulkuoikeuksien hallintaKatakri
11.2.4: Equipment maintenanceISO 27001
PR.MA-1: Asset management and repairNIST
7.13: Equipment maintenanceISO 27001
A1.2: Recovery of infrastructure according to objectivesSOC 2
F-05.2: PÄÄSYOIKEUKSIEN MYÖNTÄMINENKatakri 2020
PR.MA-1: Maintenance and repair of organizational assets are performed and logged, with approved and controlled tools.CyberFundamentals
Safe placement of equipment
Critical
High
Normal
Low
19
requirements
Physical security
Equipment maintenance and safety

Safe placement of equipment

This task helps you comply with the following requirements

Toiminnan jatkuvuuden hallintaKatakri
F08: Toiminnan jatkuvuuden varmistaminenKatakri
11.1.3: Securing offices, rooms and facilitiesISO 27001
11.2.1: Equipment siting and protectionISO 27001
11.1.4: Protecting against external and environmental threatsISO 27001
6.6.4: Fyysisten tilojen, laitteiden ja tulosteiden turvallisuusOmavalvontasuunnitelma
PR.IP-5: Physical operating environmentNIST
TEK-09: Tietojärjestelmien fyysinen turvallisuusJulkri
7.8: Equipment siting and protectionISO 27001
7.3: Securing offices, rooms and facilitiesISO 27001
Documentation of other protected assets
Critical
High
Normal
Low
53
requirements
Physical security
Equipment maintenance and safety

Documentation of other protected assets

This task helps you comply with the following requirements

Članak 30.1.i (Imovina): Upravljanja programskom i sklopovskom imovinomNIS2 Croatia
9.5 §: Suojattavan omaisuuden hallintaKyberturvallisuuslaki
9.12 §: Fyysinen turvallisuusKyberturvallisuuslaki
5.2.7: Network managementTISAX
3.1.3: Management of supporting assetsTISAX
1.3.1: Identification of information assetsTISAX
30 § 3.9° (actifs): Gestion des actifsNIS2 Belgium
1.2.3: Identify devices in use at the organisationNSM ICT-SP
1.1.5: Identify the organisation’s deliverables, information systems and supporting ICT functionsNSM ICT-SP
ID.AM-1: Physical devices and systems used within the organization are inventoried.CyberFundamentals
Identifying the hardware that is connecting to the datacenter
Critical
High
Normal
Low
1
requirements
Physical security
Equipment maintenance and safety

Identifying the hardware that is connecting to the datacenter

This task helps you comply with the following requirements

No items found.
Ensuring hardware integrity
Critical
High
Normal
Low
4
requirements
Physical security
Equipment maintenance and safety

Ensuring hardware integrity

This task helps you comply with the following requirements

PR.DS-8: Integrity checking (hardware)NIST
PR.DS-8: Integrity checking mechanisms are used to verify hardware integrity.CyberFundamentals
PR.PS-03: Hardware managementNIST 2.0
Article 32: Physical and environmental securityDORA simplified RMF
Baseline configuration for systems
Critical
High
Normal
Low
3
requirements
Physical security
Equipment maintenance and safety

Baseline configuration for systems

This task helps you comply with the following requirements

PR.IP-1: A baseline configuration of information technology systemsNIST
PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles.CyberFundamentals
PR.PS-01: Configuration managementNIST 2.0
Laitteistojen suojaus luvattomia laitteita vastaan (TL II)
Critical
High
Normal
Low
2
requirements
Physical security
Equipment maintenance and safety

Laitteistojen suojaus luvattomia laitteita vastaan (TL II)

This task helps you comply with the following requirements

TEK-17.4: Muutoshallintamenettelyt - TL IIJulkri
I-16: TURVALLISUUSLUOKITELLUN TIEDON KÄSITTELYYN LIITTYVÄN TIETOJENKÄSITTELY-YMPÄRISTÖN SUOJAUS KOKO ELINKAAREN AJAN – MUUTOSHALLINTAMENETTELYTKatakri 2020
Physical switch security
Critical
High
Normal
Low
1
requirements
Physical security
Equipment maintenance and safety

Physical switch security

This task helps you comply with the following requirements

2.4.3: Identify physical access to switches and cablesNSM ICT-SP
Equipment maintenance log
Critical
High
Normal
Low
5
requirements
Physical security
Equipment maintenance and safety

Equipment maintenance log

This task helps you comply with the following requirements

11.2.4: Equipment maintenanceISO 27001
PR.MA-1: Asset management and repairNIST
7.13: Equipment maintenanceISO 27001
A1.2: Recovery of infrastructure according to objectivesSOC 2
PR.MA-1: Maintenance and repair of organizational assets are performed and logged, with approved and controlled tools.CyberFundamentals
Electromagnetic data breach management
Critical
High
Normal
Low
11
requirements
Physical security
Equipment maintenance and safety

Electromagnetic data breach management

This task helps you comply with the following requirements

I14: Hajasäteily (TEMPEST)Katakri
11.1.3: Securing offices, rooms and facilitiesISO 27001
11.2.1: Equipment siting and protectionISO 27001
PR.DS-2: Data-in-transitNIST
FYY-01.1: Fyysisen turvallisuuden riskien arviointi - TEMPEST - TL IIIJulkri
7.8: Equipment siting and protectionISO 27001
7.3: Securing offices, rooms and facilitiesISO 27001
I-14: MONITASOINEN SUOJAAMINEN – HAJASÄTEILY (TEMPEST) JA ELEKTRONINEN TIEDUSTELUKatakri 2020
PR.DS-2: Data-in-transit is protected.CyberFundamentals
PR.DS-02: Data-in-transit is protectedNIST 2.0
Lightning protection
Critical
High
Normal
Low
2
requirements
Physical security
Equipment maintenance and safety

Lightning protection

This task helps you comply with the following requirements

11.2.1: Equipment siting and protectionISO 27001
7.8: Equipment siting and protectionISO 27001
Cabling security
Critical
High
Normal
Low
5
requirements
Physical security
Equipment maintenance and safety

Cabling security

This task helps you comply with the following requirements

11.2.3: Cabling securityISO 27001
ID.BE-4: Dependencies and critical functionsNIST
7.12: Cabling securityISO 27001
2.4.3: Identify physical access to switches and cablesNSM ICT-SP
Alarm systems for equipment environment
Critical
High
Normal
Low
14
requirements
Physical security
Equipment maintenance and safety

Alarm systems for equipment environment

This task helps you comply with the following requirements

Toiminnan jatkuvuuden hallintaKatakri
F08: Toiminnan jatkuvuuden varmistaminenKatakri
11.2.1: Equipment siting and protectionISO 27001
11.2.2: Supporting utilitiesISO 27001
PR.IP-5: Physical operating environmentNIST
7.8: Equipment siting and protectionISO 27001
7.11: Supporting utilitiesISO 27001
A1.2: Recovery of infrastructure according to objectivesSOC 2
9.12 §: Fyysinen turvallisuusKyberturvallisuuslaki
PR.IP-5: Policy and regulations regarding the physical operating environment for organizational assets are met.CyberFundamentals
Use of surge protectors and uninterruptible power supplies (UPS)
Critical
High
Normal
Low
8
requirements
Physical security
Equipment maintenance and safety

Use of surge protectors and uninterruptible power supplies (UPS)

This task helps you comply with the following requirements

Toiminnan jatkuvuuden hallintaKatakri
F08: Toiminnan jatkuvuuden varmistaminenKatakri
11.2.2: Supporting utilitiesISO 27001
PR.IP-5: Physical operating environmentNIST
7.11: Supporting utilitiesISO 27001
PR.IP-5: Policy and regulations regarding the physical operating environment for organizational assets are met.CyberFundamentals
PR.IR-02: Environmental threatsNIST 2.0
Article 32: Physical and environmental securityDORA simplified RMF
Complete these tasks in Cyberday ISMS ->

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement
Equipment maintenance and safety
of the framework  
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
No other tasks found.
Complete these tasks in Cyberday ISMS ->

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way‍
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Start free trial
Effortless compliance improvement
Widest framework library in EU
Extensive support

Start your compliance journey

Use in MS Teams or use your browser with Slack integration.
Risk free trial. No credit card required. Stop at any time.

Start free 14-day trial
Book a meeting
How it works?
SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templates
Use cases
By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018
By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementPrivacy managementVendor assessments
Resources
AcademyWebinarsBlogHelp articlesVideo coursesContent libraryGuidesNewsletterLeave a reviewPartner programTeamTerms of usePrivacy policy
Contact us
+358 10 231 6010
team@cyberday.ai
App works in:
Known in Finland as Digiturvamalli
© Cyberday Inc. Kalevantie 2 33100 Tampere, Finland
Cyberday.ai - Improve and certify your cyber security