Maintenance and repairs of industrial control and information system components are performed consistent with policies and procedures.