PR.PS-03:

Hardware is maintained, replaced, and removed commensurate with risk

Implementation Examples

Ex1:

Replace hardware when it lacks needed security capabilities or when it cannot support software with needed security capabilities

Ex2:

Define and implement plans for hardware end-of-life maintenance support and obsolescence

Ex3:

Perform hardware disposal in a secure, responsible, and auditable manner