CNSA 2.0 applies to fielded equipment: NSS in current use must be upgraded in a timely fashion unless the system received a waiver through the approved process, consistent with NSM-8, NSM-10, CNSSP 11 and CNSSP 15; NSA will require transition of fielded equipment as industry adopts CNSA 2.0, in some cases through a hardware refresh, and expects those equipment transitions completed by 31 December 2030; legacy equipment and software not refreshed regularly will require a waiver and a plan to bring it into compliance once protection profile and NSM-10 refresh requirements remove legacy algorithm support.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.