Acquisition and Maintenance Policy

Version: 1.00Issue Date: 10/6/2015

This Acquisition and Maintenance Policy ensures that purchased infrastructure will be in compliance with the acquisition and maintenance framework. This will prevent purchase of equipment that does not use a standard or current technology and may prevent costly maintenance.

1.0 Overview

This Acquisition and Maintenance Policy provides policy to keep acquisition and maintenance activities in line with planned technology infrastructure.

2.0 Purpose

This Acquisition and Maintenance Policy requires a fremework to be established for the acquisition and maintenance of systems.

3.0 Scope

This Acquisition and Maintenance Policy applies to all infrastructure, equipment, and software acquisition and maintenance for tasks and equipment. This policy is effective as of the issue date and does not expire unless superceded by another policy.

4.0 Acquisition and Maintenance Framework

  • A framework for acquisition and maintenance must be created by management which complies with current information technology procedures and standards. The framework must comply with the technology infrastructure and consider future information technology advancements.
  • The acquisition and management framework must include guidance for:
    • Acquisition processes
    • Patch management
    • Document publication
    • Document retention
    • System enhancements methods
    • Management responsibilities
    • Development standards
    • Definition of terms
  • Stakeholder approval must formally approve the use of new technologies on their projects and the stakeholders must be made aware that their approval is required.
  • Processes for acquisition and maintenance must be designed to support the technology and infrastructure framework. Equipment purchases must comply with the infrastructure framework or be approved by the head of the information technology department.
  • Interdependencies between system products and versions must be planned for and tested.
  • A process for the periodic review of the acquisition and management framework must be created by management.
  • Processes for acquisition and maintenance must encourage compliance with the acquisition and management framework, and implementation consistency.
  • Processes for acquisition and maintenance must support business needs and comply with industry standards.
  • Someone in the organization must be tasked with maintaining contact with organizations that provide information about new technologies so the potential use of new technologies may be intelligently considered and they may be tested or evaluated to determine their usefulness.

5.0 Enforcement

Since following the Acquisition and Maintenance Policy is important for the stability of the organization, employees that purposely violate this policy may be subject to disciplinary action up to and including denial of access, legal penalties, and/or dismissal. Any employee aware of any violation of this policy is required to report it to their supervisor or other authorized representative.

6.0 Other Policies

  • Technology Planning Policy
  • Technology and System Management Policy

11.0 Additional Requirements

Approval

Approved by:__________________________ Signature:_____________________ Date:_______________