4.1.2. Life-cycle and Change Management

Life-cycle Management:

• EOL (End-of-Life): Product no longer sold
• EOS (End-of-Support): No more patches, updates, or vendor support
• Decommissioning: Secure retirement of old equipment (data wiping, physical destruction)

Software/Firmware Management:

• Security patches and bug fixes
• Operating system updates
• Firmware updates (device-specific embedded software)

Change Management Process:

1. Request: Document proposed change and business justification
2. Impact assessment: What might break? What's the rollback plan?
3. Approval: CAB (Change Advisory Board) or authorized approver
4. Implementation: During maintenance window with rollback prepared
5. Verification: Confirm change worked as expected
6. Documentation: Update diagrams, configs, procedures