Legacy technology management

Explore ASD’s advice on the risks of legacy technology and what organisations can do to manage them.

Old tech lets threats thrive

Legacy technology is any technology that is no longer supported by manufacturers, developers or vendors. These technologies don’t receive security updates or patches, making them more vulnerable to malicious actors. Managing legacy technology is an important part of any cyber security strategy. Organisations should replace unsupported and outdated systems, or monitor and manage the risks where replacement isn’t an option.

Manage your legacy technology

Hear from the Australian Signals Directorate’s Head of the Australian Cyber Security Centre, Stephanie Crowe, on what legacy technology is and why it’s important to take action.

Featured publications

Discover resources to help you manage your legacy technology, including guidance for executives and practitioners.

End of support for Microsoft Windows and Microsoft Windows server

Reduce risks from old and unsupported Windows systems by upgrading the systems or using controls to keep your organisation secure.

Managing the risks of legacy IT: Executive guidance

Manage the cyber security risks of legacy information technology through planning, governance and active management of technology.

Managing the risks of legacy IT: Practitioner guidance

Learn how to identify, assess and reduce the security risks caused by outdated and unsupported information technology systems.

What are you looking for?

Stay secure

Guidance

Resources

Access publications and alerts

Publications

Alerts, advisories and reports

Recover from a cyber incident

How to recover

Where to get help

Submit a report

Report an issue

Regulatory reporting

What we do

About us

News and programs