EOL and legacy register
Guide
Request continued operation of a legacy system: exception with risk assessment
Step by step to a request in the EOL/legacy register: pick the system, record the reason and compensating controls, and rate the risk of continued operation with and without controls.
7 min read
Guide
Approve or reject exceptions for legacy systems: depending on residual risk
How to decide as the second person on a request in the EOL/legacy register: from the bell to the request, confirm the residual risk, give a reason from level high, or reject with a reason.
6 min read
Guide
Reassess approved exceptions and maintain the modernization plan
What to do when the risk of a legacy system changes: reassess the exception, prove the history of versions and decisions, maintain the modernization plan and close the exception.
7 min read
Guide
Evaluate the EOL/legacy register: add missing assessments, filter, export
Add missing risk assessments to older exceptions, filter the register by state and residual risk, export the selection as CSV for audits and understand the read-only role.
6 min read