d) appropriate controls should be implemented when equipment is scheduled for maintenance,
taking into account whether this maintenance is performed by personnel on site or external to the
organization; where necessary, confidential information should be cleared from the equipment or
the maintenance personnel should be sufficiently cleared;