Other title: System Maintenance Policy 2100-18

[06/10/2020 update]; At head of title: DAS Policy; "Effective date: 12/21/2018."; Policy number: 2100-18; "Revision history: 12/21/2018, Original Policy; 06/10/2020, Updated the policy template..."--Page 7; Includes bibliographical referencesThe purpose of this policy is to establish system maintenance requirements to ensure Ohio Department of Administrative Systems (DAS)-managed information systems, IT equipment, as well as any associated state data, is properly protected during maintenance. In the context of this policy, maintenance does not include application updates performed under release management processes. References to National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, "Security and Privacy Controls for Federal Information Systems and Organizations," family identifiers and control numbers are provided in parentheticals next to requirement headers, where applicable. The requirements of the NIST SP 800-53 Maintenance (MA) control family are addressed in this policy. The scope of this policy includes DAS-managed information systems and IT equipment that is authorized to conduct state business. This policy also applies to DAS data owners, system or service owners, and extends to managed service provider