SA-22-727 Unsupported System Components

Unsupported System Components

Control ID

SA-22-727

Control Name

Unsupported System Components

Control Category

Security Assessment and Authorization

Functional Areas

Sub-Areas

NIST Baseline Level(s)

NOT SELECTED

NIST Priority

State Implementation Required

Agency Last Implemented Date

Risk Statement

Control Description

The organization: a. Replaces information system components when support for the components is no longer available from the developer, vendor, or manufacturer; and b. Provides justification and documents approval for the continued use of unsupported system components required to satisfy mission/business needs.

Control Example

State Implementation

No statewide control

Testing Procedures