In this lesson students will learn about the importance of maintaining protection systems that has been implemented for information assets as it pertains to the overarching NIST CSF Program. In this lesson we will clarify some of the technical requirements used to maintain protection systems. These requirements include pre-authorized approval, use of approved tools, recording changes, and carefully managing remote maintenance activities. In this lesson we will review many valuable considerations for the establishment of maintenance for protection systems. We will also provide an exercise for students to practice their newfound knowledge and develop new Cybersecurity skills.