This control requires your organization to regularly perform maintenance on its systems, including hardware and software updates, patches, configuration changes, and preventive care to ensure secure and stable operation—especially for systems that store or process Controlled Unclassified Information (CUI).