Lifecycle Mismatch

LinkedIn Post 3: Lifecycle Mismatch

Building devices: 10-20 year lifespan

Manufacturer support: 3-5 years

That gap is the lifecycle problem. Your HVAC controller will be on your network in 2035, running on code that hasn't been patched since 2024.

Any vulnerability discovered after manufacturer EOL goes unpatched forever. You inherit a device that's still operational, still networked, but no longer receiving security updates.

PSTI enforcement asks: how are you managing this?

"The vendor stopped supporting it" isn't a regulatory defense. You distributed the device, so you own the risk.

Strategies:

1. Negotiate extended support agreements (costs ~15-20% of device cost per year)

2. Isolate the device on a separate network segment

3. Plan replacement before EOL

Choose one. Document it. Have evidence ready.

#PSTI #IoT #Infrastructure #Facilities