2-15-3—2-15-3
>Control Description
Develop and implement a plan for the withdrawal of the IoT devices and services at the end of their lifecycle. Implement the following practices for establishing an end-of-life strategy for the IoT devices and services:
▪ Develop a replacement plan, and an end-of-life plan for the IoT devices and services that have run out of support and/or no longer support the essential cybersecurity functions. Also include third-party components within the end-of-life plan.
▪ Implement measures to securely dispose the data that was stored or being processed by the IoT devices/ service, as per organizational policies and regulations.
▪ Maintain an audit log to monitor the IoT devices and services disposal process.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.