Foundations
Legacy & Unsupported Systems
Manage systems that cannot be patched with compensating controls and a lifecycle plan.
Defensive guide
Why should I care?
OT lifecycles routinely exceed vendor support periods; risk must be handled, not ignored.
How to implement it
- Identify and label unsupported assets
- Tighten conduits around them
- Increase monitoring
- Feed replacement into capital planning
What good looks like
- A documented, funded lifecycle plan
- Compensating controls tested
Common failure modes
- Unsupported systems treated as if they were supported
How to verify it
- Confirm each unsupported asset has documented compensating controls