Does your organization have policies requiring that only approved supplier personnel perform maintenance on supplier products?

This question assesses whether your organization has formal policies that restrict maintenance activities on supplier products to only those personnel who have been explicitly approved by the supplier. Such policies help prevent unauthorized modifications, reduce the risk of introducing vulnerabilities, and maintain warranty compliance. Evidence could include documented maintenance policies that explicitly state this requirement, supplier agreements that specify authorized maintenance personnel, or maintenance logs showing verification of approved personnel credentials before maintenance activities are performed.