Management plans for each system's life cycle and end of life, with policies for hardware and software life cycles, inventories of systems and applications, an approved sunset policy, tracking of changes, update availability and vendor end of support, risk assessments that inform end-of-life decisions, replacement planning for systems nearing obsolescence, secure destruction or wiping of drives returned or donated, and, where an end-of-life system must stay in use, mitigating controls such as network segregation and compensating controls until replacement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.