MNT-03.3: Automated Support For Predictive Maintenance
Automated mechanisms exist to transfer predictive maintenance data to a computerized maintenance management system.
Control Question: Does the organization use automated mechanisms to transfer predictive maintenance data to a computerized maintenance management system?
General (4)
| Framework | Mapping Values |
|---|---|
| CSA IoT SCF 2 | OPA-02 |
| NIST 800-53 R4 | MA-6(3) |
| NIST 800-53 R5 (source) | MA-6(3) |
| NIST 800-53 R5 (NOC) (source) | MA-6(3) |
Capability Maturity Model
Level 0 — Not Performed
There is no evidence of a capability to transfer predictive maintenance data to a computerized maintenance management system.
Level 1 — Performed Informally
C|P-CMM1 is N/A, since a structured process is required to transfer predictive maintenance data to a computerized maintenance management system.
Level 2 — Planned & Tracked
C|P-CMM2 is N/A, since a well-defined process is required to transfer predictive maintenance data to a computerized maintenance management system.
Level 3 — Well Defined
Maintenance (MNT) efforts are standardized across the organization and centrally managed, where technically feasible, to ensure consistency. CMM Level 3 control maturity would reasonably expect all, or at least most, the following criteria to exist:
- IT/cybersecurity personnel develop and disseminate formal practices to implement enterprise-wide capability to conduct secure and timely technology asset-specific maintenance operations, including preventative and reactionary maintenance operations.
- Technology asset-related maintenance operations are centralized in terms of change management and governance. Local/regional practices fall under the broader enterprise-wide technology asset maintenance program.
- Facilities management uses an enterprise-wide process to facilitate the secure and timely implementation of non-IT maintenance operations, including preventative and reactionary maintenance operations. Local/regional practices fall under the broader enterprise-wide facilities management program.
- A Change Control Board (CCB), or similar function, centrally manages the process of IT and non-IT maintenance operations to reduce the chance of business interruptions from maintenance operations.
Level 4 — Quantitatively Controlled
See C|P-CMM3. There are no defined C|P-CMM4 criteria, since it is reasonable to assume a quantitatively-controlled process is not necessary to transfer predictive maintenance data to a computerized maintenance management system.
Level 5 — Continuously Improving
See C|P-CMM4. There are no defined C|P-CMM5 criteria, since it is reasonable to assume a continuously-improving process is not necessary to transfer predictive maintenance data to a computerized maintenance management system.
Assessment Objectives
- MNT-03.3_A01 automated mechanisms used to transfer predictive maintenance data to a maintenance management system are defined.
- MNT-03.3_A02 predictive maintenance data is transferred to a maintenance management system using automated mechanisms.