Perform Maintenance: Perform maintenance on organizational systems.
Monarch ISC Guidance
This is about doing the basics with system maintenance including having a policy requiring regular maintenance to IT systems in your environment. This includes physical and logical maintenance to keep systems running smoothly and at the level of performance expected. Following manufacturers guidance is the best way to create practices, and then require those practices in your policy statements.
NIST SP 800-171 R2
This requirement addresses the information security aspects of the system maintenance program and applies to all types of maintenance to any system component (including hardware, firmware, applications) conducted by any local or nonlocal entity. System maintenance also includes those components not directly associated with information processing and data or information retention such as scanners, copiers, and printers.