{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"operational","domain":["Secure Configuration & Change Management","Secure Development (SDLC) & Application Security"],"inherent_rating":"medium","taxonomy":["iso-27005-threat","iso-27005-vulnerability"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Atech-maintainability-breach","description":"Loss of the ability to maintain, update, or repair information systems due to missing documentation, tools, skills, or unversioned software — leaving systems unpatchable and increasingly fragile over time.","details":{"category":"operational","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"tech-maintainability-breach","taxonomies":["iso-27005-threat","iso-27005-vulnerability"],"treatment":"mitigate"},"id":"risk:tech-maintainability-breach","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Atech-maintainability-breach","sourceIds":["cobit-2019","gdpr","nist-800-53","nist-csf-2","pci-dss"],"sourceUrl":null,"title":"Loss of system maintainability","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3c5f547348a371804de3bb0ec2e331d892292ebd788d74d525b76c585e5de1a9","properties":{"rationale":"Versioned, protected baselines for code, dependencies and build settings cure the unversioned-software cause of lost maintainability.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-06-c1afc713.json","sourceId":"uc:UC-SDLC-06","targetDetailPath":"/data/v1/records/risk-tech-maintainability-breach-f075a363.json","targetId":"risk:tech-maintainability-breach","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4d189218cd88e1df9073d08c1da67c13feb86e7e08ef059238ee346a48258912","properties":{"rationale":"Role-appropriate training and materials for admins/users/security supply the skills whose absence erodes maintainability.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-09-659d0280.json","sourceId":"uc:UC-SDLC-09","targetDetailPath":"/data/v1/records/risk-tech-maintainability-breach-f075a363.json","targetId":"risk:tech-maintainability-breach","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4e778aaaeeb31f8389d5b248631ec870302cd8a105bf47518f099eea131e720f","properties":{"rationale":"Scheduled, timely maintenance with support and spare parts within defined timeframes directly prevents loss of the ability to maintain or repair systems.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-config-07-db5cd0ea.json","sourceId":"uc:UC-CONFIG-07","targetDetailPath":"/data/v1/records/risk-tech-maintainability-breach-f075a363.json","targetId":"risk:tech-maintainability-breach","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9741022cce3cbb9714e5db93ed3aae926f55ae4b57b7d4bbb7d05403db468f06","properties":{"rationale":"Producing and maintaining current administrator/user documentation cures the missing-documentation cause of lost maintainability.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-08-29ce69df.json","sourceId":"uc:UC-SDLC-08","targetDetailPath":"/data/v1/records/risk-tech-maintainability-breach-f075a363.json","targetId":"risk:tech-maintainability-breach","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fea58377c13abbe3a866323ab4c747656b27bb6bce0828478d7e3fa165dc37db","properties":{"rationale":"Patching and replacing unsupported software keeps systems current and patchable, contributing to maintainability; maintenance support/tooling is the operative control.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-config-04-ed033b30.json","sourceId":"uc:UC-CONFIG-04","targetDetailPath":"/data/v1/records/risk-tech-maintainability-breach-f075a363.json","targetId":"risk:tech-maintainability-breach","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fecba36c6eed5046effa9686140b64226575b96a4fcb7c54de02f63de52b21c4","properties":{"rationale":"Identifying and replacing end-of-support components before support lapses prevents systems becoming unpatchable and fragile.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-12-08ce2fc7.json","sourceId":"uc:UC-SDLC-12","targetDetailPath":"/data/v1/records/risk-tech-maintainability-breach-f075a363.json","targetId":"risk:tech-maintainability-breach","type":"mitigates"}],"schemaVersion":1}