When applications, operating systems, network devices or other IT equipment that are no longer supported by vendors cannot be immediately removed or replaced, compensating controls are implemented until such time that they can be removed or replaced.
Topic
Cessation of support
Applicable to
all
History
Jun 2024
When applications, operating systems, network devices or other IT equipment that are no longer supported by vendors cannot be immediately removed or replaced, compensating controls are implemented until such time that they can be removed or replaced.
References to ICT equipment were amended to IT equipment.
Dec 2022
When applications, operating systems, network devices or other ICT equipment that are no longer supported by vendors cannot be immediately removed or replaced, compensating controls are implemented until such time that they can be removed or replaced.
A new control was added covering the use of compensating controls when unsupported applications, operating systems, network devices or other ICT equipment cannot be immediately removed or replaced.