Obsolete Operating Systems

ISO Position Paper

Position Title: Obsolete Operating Systems

Position Audience: Princeton University Community

Contact: Information Security Office: InfoSec@princeton.edu

Position Release Date: August 1, 2019


Problem Statement

Like all software, operating systems (OS) have a life cycle. Eventually vendors end their
support for a version of an operating system. Once support ends, additional security updates
are no longer provided rendering the OS insecure at that point. This applies to all operating
systems. The most common are Microsoft Windows, Apple Mac OS, the various versions of
Linux, Apple iOS, and Google Android.

ISO Position

Computers and mobile devices running an obsolete, out-of-support operating system cannot be
used for University work. They should not be placed on the University network, nor should they
be allowed to connect via the University’s SRA/VPN service. These devices put the University’s
information security at significant risk.

Data classification: Public