What an auditor, or Sekit's evidence engine, asks for.
Equipment maintenance records
The evidence that equipment (laptops, servers, network gear) is properly maintained to stay available and secure, with records of servicing, warranties or service contracts.
From the Sekit evidence catalog
In practice
Equipment maintenance in a small company usually means laptops, a server or two, and network gear under a vendor warranty or support contract. Auditors look for a record that maintenance happened, service logs, warranty documentation or a support contract, rather than assuming equipment stays reliable because nothing has broken yet. A common gap is that UPS and cooling maintenance gets tracked because a facilities vendor handles it, while laptops and network switches have no maintenance record at all beyond being replaced when they fail.
Common gaps
Laptops and network switches have no maintenance schedule or service record, and the only evidence of upkeep is that broken devices get replaced reactively.
A support contract exists for the main server but has lapsed, and nobody noticed until a fault occurred and the vendor asked for a renewed contract before responding.
UPS maintenance is logged consistently because a facilities vendor handles it, but this gets treated as covering all equipment maintenance rather than only the power and cooling subset.
Questions your auditor will ask
How do you know company equipment, like laptops and servers, is properly maintained?
Equipment maintenance records, such as service logs, warranties or support contracts, document that laptops, servers and network gear are kept available and secure.
Is maintenance tracked for all equipment or only some of it?
UPS, generator and cooling maintenance is tested and logged on a schedule, and the same discipline is expected to extend to other equipment categories.
What happens if a device breaks between scheduled service checks?
A fault is logged and repaired under the applicable warranty or support contract, and the incident is added to the equipment's maintenance record.
Where regulation demands it
NIS2 art. 13.1 requires protection of supporting utilities and equipment that keep systems running.
Related controls
Via the shared Sekit CSF topic, not the framework's own index.