ASD Essentials for Enterprise IT GOV-14: Legacy system management: identify, assess and treat the risks of legacy and unsupported technologies until removed

What does GOV-14 require?

A standing process finds legacy and unsupported technology, assesses its risk and treats it with compensating controls, closer monitoring and assurance for as long as it remains, until it is retired or replaced.

Maintained by Gerard Blokdyk

Other controls in Capability domain: Governance and culture – ASD Essentials for Enterprise IT

GOV-01 Executive cyber security accountability: define board and executive accountabilities, risk appetite and a review cadence
GOV-03 Security risk management assurance: maintain a risk management methodology and plan
GOV-04 Cyber security resourcing: assign skilled personnel, define responsibilities in roles and review resourcing periodically
GOV-08 Executive accountability for artificial intelligence use, governance and risk
GOV-11 Supplier cyber security assurance: risk-assess suppliers proportionately, retain evidence and keep assurance current
PRO-14 Cyber security awareness training: role-tailored before access, updated regularly for current threats

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ASD Essentials for Enterprise IT controls