Summer Regulatory Summit eBook

5. End-of-Life

o The Organization should upgrade or replace all servers or workstations running unsupported operating systems as soon as technically feasible. Having systems with OS (Operating System) at EOL (End-of-Life) and no longer supported, exposes the Organization to numerous vulnerabilities. o The Organization needs to document an End-of-Life Policy or procedures to define timeframes and track the life of IT assets to ensure replacements or upgrades of respective assets are performed in a timely manner.

RECOMMENDATION

© SBS CyberSecurity, LLC www.sbscyber.com

17