Preventative Maintenance Critical Control or Support

Is preventative maintenance a critical control? In this short explainer, we unpack why the answer is both no—it doesn’t meet the definition of a control and yes—it still plays an essential role in supporting the health of true critical controls. We walk through the definition of a control, the difference between controls, support activities, and verification activities, and why preventative maintenance sits firmly in the category of a foundation system rather than a critical control. Clear, simple, and practical for anyone working in Critical Control Management (CCM) or Critical Risk Management (CRM). ⏱️ Timestamps 00:00 – Intro: Why ask “Is preventative maintenance a critical control?” 00:35 – Why the question divides opinion 01:10 – Short answer: No… but with important nuance 01:30 – What is a control? (Act, Object, System) 02:15 – Why preventative maintenance doesn’t pass the test (specific, measurable, auditable) 03:00 – The three buckets: Controls, Support Activities, Verification Activities 03:45 – Why maintenance is a support activity, not a control 04:20 – Example: Brakes vs maintaining the brakes 05:00 – Yes, there are edge cases (but generally the rule holds) 05:30 – Maintenance as a foundation system / principal control system 06:10 – How foundation systems support all critical risks (horizontal elements) 06:45 – When poor maintenance causes unwanted events 07:20 – Governance: vertical (critical controls) vs horizontal (foundation systems) 08:00 – Final position: Important? Yes. A critical control? No.