The FI should avoid outdated and unsupported hardware and software, monitor end-of-support dates, develop a refresh plan to replace components before end of support, assess the risk of continued use of components approaching it and implement mitigation, and obtain management dispensation for continued use of unsupported components, with a validity period matching the risk and mitigations and periodic review.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.