Each host is responsible for carrying out checks and maintenance on/for itself, based on its local copy of policy.