Legacy OS exception register maintenance

Overview

Unsupported OS should die—until capital budget kills it, register every exception.

Fields

Hostname, OS version sunset date, compensating controls (segmentation, no internet), business owner, quarterly reapproval.

Sunset triggers

Replacement PO approved OR virtualize behind zero-trust gateway only as interim.

Risk scoring

Tie to insurance questionnaire honestly.

Reporting

Dashboard red >90 days past vendor support without signed exception.