Security starts at purchase: the technology lifecycle

Choose well

Every hardware or software component brings an update lifecycle, a supply chain and an end-of-support date. Assessing them at purchase avoids introducing devices that will become vulnerable and impossible to update.

Integrate and maintain

Secure baseline configurations, up-to-date firmware, an accurate inventory and maintenance contracts consistent with system criticality. NIS2 and the Cyber Resilience Act make these aspects part of supply chain risk management obligations.

Decommission without leaving traces

1. Plan replacement before end of support.
2. Securely erase data from media, with documented evidence.
3. Update inventory, monitoring and contracts.
4. Recover or dispose of components in line with environmental regulations.