Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >AESCSF
  3. >ARCHITECTURE
  4. >Implement IT And OT Asset Security As An Element Of The Cybersecurity Architecture
  5. >AESCSF-ARCHITECTURE-3i
AESCSF-ARCHITECTURE-3iActive

Maintenance and capacity management activities are performed for all assets within the function

Statement

Maintenance and capacity management activities are performed for all assets within the function

Context and Guidance: Maintenance and capacity management support operational goals by helping to ensure the availability of assets important to the delivery of the function. Organisations should plan for adequate maintenance to be performed with as little impact on operations as possible. This may include performance of preventative maintenance to avoid unanticipated equipment failure, as well as the scheduling of maintenance for planned outage windows or other off-peak operational hours. Capacity management planning requires an understanding of future operational needs of the organisation and adequate budget, equipment, and tools to meet those needs. This may require advanced planning and engagement with budgeting processes and organisational leadership to develop and communicate appropriate justification for necessary resources.

Location

Domain
ARCHITECTURE
Objective
Implement IT and OT Asset Security as an Element of the Cybersecurity Architecture

Practice Details

Identifier
AESCSF-ARCHITECTURE-3i
Type
Practice
Domain
ARCHITECTURE
Objective
Implement IT and OT Asset Security as an Element of the Cybersecurity Architecture

Maturity Level

MIL-1MIL-2MIL-3

Security Profile

SP-1SP-2SP-3
ISM
ISM-1579relatedvia aescsf-reference
C2M2
C2M2-ARCHITECTURE-3Iequivalentvia derived-shared-practice-structure
View in graphReport an issue
← Back to Implement IT and OT Asset Security as an Element of the Cybersecurity Architecture
Implement IT and OT Asset Security as an Element of the Cybersecurity Architecture13 controls
AESCSF-ARCHITECTURE-3aLogical and physical access controls are implemented to protect assets that are important to the delivery of the func...AESCSF-ARCHITECTURE-3bEndpoint protections (such as secure configuration, security applications, and host monitoring) are implemented to pr...AESCSF-ARCHITECTURE-3cThe principle of least privilege (for example, limiting administrative access for users and service accounts) is enfo...AESCSF-ARCHITECTURE-3dThe principle of least functionality (for example, limiting services, limiting applications, limiting ports, limiting...AESCSF-ARCHITECTURE-3eSecure configurations are established and maintained as part of the asset deployment process where feasibleAESCSF-ARCHITECTURE-3fSecurity applications are required as an element of device configuration where feasible (for example, endpoint detect...AESCSF-ARCHITECTURE-3gThe use of removeable media is controlled (for example, limiting the use of USB devices, managing external hard drives)AESCSF-ARCHITECTURE-3hCybersecurity controls are implemented for all assets within the function either at the asset level or as compensatin...AESCSF-ARCHITECTURE-3iMaintenance and capacity management activities are performed for all assets within the functionAESCSF-ARCHITECTURE-3jThe physical operating environment is controlled to protect the operation of assets within the functionAESCSF-ARCHITECTURE-3kMore rigorous cybersecurity controls are implemented for higher priority assetsAESCSF-ARCHITECTURE-3lConfiguration of and changes to firmware are controlled throughout the asset lifecycleAESCSF-ARCHITECTURE-3mControls (such as allowlists, blocklists, and configuration settings) are implemented to prevent the execution of una...