PR.PS-03 Hardware is maintained, replaced, and removed commensurate with risk

Statement

Hardware is maintained, replaced, and removed commensurate with risk

Guidance

Replace hardware when it lacks needed security capabilities or when it cannot support software with needed security capabilities

Guidance

Define and implement plans for hardware end-of-life maintenance support and obsolescence

Guidance

Perform hardware disposal in a secure, responsible, and auditable manner

1. Overview

1.1 References

• 6.10 Vulnerability handling and disclosure

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final