Unsupported Technology Retirement

Number:
SEC-04-08-S

Purpose

Agencies must ensure software and hardware used for state business remain within the vendor's support lifecycle, preferring the latest supported versions. They must document retirement plans for products nearing End of Support (EoS) and conduct risk assessments for continued use beyond support. Retirement plans should align with risk management policies, include resource allocation, and discontinue hardware before End of Life (EoL). Annual certifications require agencies to submit complete software and hardware inventories verifying support lifecycle compliance. Contracts must mandate vendors maintain current versions. Waivers are required to operate unsupported software or hardware. Compliance is reviewed periodically.