risk
Loss of system maintainability
Loss of the ability to maintain, update, or repair information systems due to missing documentation, tools, skills, or unversioned software — leaving systems unpatchable and increasingly fragile over time.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- category
- operational
- domain
- Secure Configuration & Change Management
- Secure Development (SDLC) & Application Security
- taxonomy
- iso-27005-threat
- iso-27005-vulnerability
- inherent_rating
- medium
Details
- risk_id
- tech-maintainability-breach
- category
- operational
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- iso-27005-threat
- iso-27005-vulnerability
Source
No record-specific source URL is provided.
Connections
- UC-SDLC-06 — Maintain configuration control over systems and code mitigates Loss of system maintainability
- strength
- primary
- rationale
- Versioned, protected baselines for code, dependencies and build settings cure the unversioned-software cause of lost maintainability.
- UC-SDLC-09 — Prepare and train users for new and changed systems mitigates Loss of system maintainability
- strength
- primary
- rationale
- Role-appropriate training and materials for admins/users/security supply the skills whose absence erodes maintainability.
- UC-CONFIG-07 — Perform controlled, timely maintenance of systems and hardware mitigates Loss of system maintainability
- strength
- primary
- rationale
- Scheduled, timely maintenance with support and spare parts within defined timeframes directly prevents loss of the ability to maintain or repair systems.
- UC-SDLC-08 — Maintain current system documentation and knowledge mitigates Loss of system maintainability
- strength
- primary
- rationale
- Producing and maintaining current administrator/user documentation cures the missing-documentation cause of lost maintainability.
- UC-CONFIG-04 — Build security and privacy into software design and upkeep mitigates Loss of system maintainability
- strength
- related
- rationale
- Patching and replacing unsupported software keeps systems current and patchable, contributing to maintainability; maintenance support/tooling is the operative control.
- UC-SDLC-12 — Manage solution assets and retire unsupported components mitigates Loss of system maintainability
- strength
- primary
- rationale
- Identifying and replacing end-of-support components before support lapses prevents systems becoming unpatchable and fragile.