Commit 7933f9dd authored by Valerie Aurora (Bow Shock)'s avatar Valerie Aurora (Bow Shock)
Browse files

Remove support period

parent c63ce6fb
Loading
Loading
Loading
Loading
+0 −23
Original line number Diff line number Diff line
@@ -735,29 +735,6 @@ The operating system often provides many security functions to other components
* Logging and monitoring mechanisms
* Secure deletion and data transfer

## 4.11 Support period

> Give guidelines to the manufacturer for selecting and documenting the expected support period. Generally the support period should be at least 5 years. It may be shorter if the expected lifetime of the product is less than 5 years. The 5 year minimum support period of CRA Article 13<a href="#_ref_i.1">[i.1]</a> is explained in greater detail in Recital 60, which also provides guidance on exceptions both for special purpose products where a shorter period is necessary or unavoidable and classes of products that the Act expects to have a longer support period. A 10 year minimum support period is suggested for:
>
> 1. Hardware products such as: “motherboards or microprocessors, network devices such as routers, modems or switches”
> 1. Long use software product such as “operating systems or video-editing tools”
> 1. Products designed for use in industrial settings, such as industrial control systems
>
> In the future, a dedicated administrative cooperation group “ADCO” whose duties and creation are described in CRA Recitals 22, 62, 108, 109 and Article 52 (15), (16)<a href="#_ref_i.1">[i.1]</a> will assist in the process of setting minimum support periods by collecting and analyzing data on support periods set by manufacturers and setting minimums should manufacturers systematically fail to provide adequate support periods. These duties and powers are described in Recital 62, Recital 117, and Article 13 (8) of the Act<a href="#_ref_i.1">[i.1]</a>. Any support period set by the standards will be superseded by those produced by the commission or its delegates.

The support period of an operating system shall be at least 10 years, unless [QUANTIFIABLE JUSTIFICATION DESCRIBED HERE].

> FIXME explain how shorter support periods can be justified.

In accordance with Article 13 (8) of the CRA<a href="#_ref_i.1">[i.1]</a>, the manufacturer shall document how it reached a decision on a specific support period in the technical documentation of the product. The manufacturer shall document the following considerations that affected the decision making process:

1. Reasonable user expectations
1. Nature of the product and intended purpose
1. Relevant law and guidance
1. Support period of products on the market with similar functionality
1. The availability of the operating environment
1. The support period of any integrated components that provide core functions of the product.

# 5 Requirements specifications

## 5.1 General