PR.PS-03.248
Has your organization established and implemented a formal hardware lifecycle management plan that addresses end-of-life maintenance support and obsolescence?
Explanation
This question assesses whether your organization has a structured approach to managing hardware throughout its lifecycle, particularly focusing on end-of-life planning. A comprehensive hardware lifecycle management plan helps prevent security vulnerabilities from outdated or unsupported hardware, ensures business continuity, and allows for proper budgeting and resource allocation for hardware replacements. Evidence could include a documented hardware lifecycle management policy, an inventory database with end-of-life dates for all hardware assets, maintenance contracts with vendors, and a hardware refresh schedule or roadmap showing planned replacements for aging equipment.
Implementation Example
Define and implement plans for hardware end-of-life maintenance support and obsolescence
ID: PR.PS-03.248
Context
- Function
- PR: PROTECT
- Category
- PR.PS: Platform Security
- Sub-Category
- Hardware is maintained, replaced, and removed commensurate with risk

