Clear Communication Regarding Product End-of-Life, v1.0

Specifies requirements in accordance with the DHS CISA Secure-by-Design Pledge, published by the U.S. Dept of Homeland Security (DHS) Cybersecurity and Infrastructure Agency (CISA). Requires an organization to clearly communicate end-of-life (EOL) timelines and offer transition support or guidance for unsupported products, across all of its product and service offerings.

Assessment Step

1
Clear Communication Regarding Product End-of-Life (ClearCommunicationRegardingProductEnd-of-Life)
Across all of its product and service offerings, does the organization clearly communicate end-of-life (EOL) timelines and offer transition support or guidance for unsupported products?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.

Conformance Criteria (1)

Clear Communication Regarding Product End-of-Life
Across all of its product and service offerings, the organization must clearly communicate end-of-life (EOL) timelines and offer transition support or guidance for unsupported products.
Citation
SBDP
(doc)