Control: ism-1809; Revision: 0; Updated: Dec-22; Applicability: ALL; Essential Eight: N/A ​

When applications, operating systems, network devices or other ICT equipment that are no longer supported by vendors cannot be immediately removed or replaced, compensating controls are implemented until such time that they can be removed or replaced.