Resources · 93

Software inventory: prepare for end of support

Turn a tool list into maintenance, replacement and retirement decisions.

· 3 min

Server racks in a data centre Illustration · fictional scene

What this guide helps achieve

  • Start with actual services
  • Verify supplier conditions
  • Map business dependencies
  • Prepare a decision
  • Close with operational evidence

Quick check

  • Must all old software be replaced?
  • What if support dates are unknown?
  • Does an exception remove risk?

Step-by-step method

  1. 01

    Start with actual services

    Inventory software, hosted services, versions, environments and essential uses. Reconcile discovery with procurement. CSF 2.0 connects inventories with lifecycle management; a paid subscription does not establish maintenance of a deployed version.

    Output: Instance and usage inventory.

  2. 02

    Verify supplier conditions

    Retain official link, edition, version, maintenance type and consultation date. Distinguish security fixes, standard support and extended contracts. Label unknown conditions explicitly; never invent an expiry date.

    Output: Sourced support conditions.

  3. 03

    Map business dependencies

    Record owners, integrations, data and tasks that would stop working. An internal, unexposed component can still be critical. Prioritise exposure and impact rather than age alone.

    Output: Business dependency map.

  4. 04

    Prepare a decision

    Compare upgrade, replacement, removal and controlled temporary retention. Test compatibility, restoration and data exit. Give exceptions a reason, owner and review deadline.

    Output: Plan and owned exceptions.

  5. 05

    Close with operational evidence

    Verify deployed version, business journey and retirement of old instances. Reconcile register, monitoring and contracts. Buying a new licence does not prove migration.

    Output: Version and retirement evidence.

Fictional acceptance-test scenarios

These proposed cases are not client observations. Adapt data, permissions and acceptance criteria to your authorised environment.

Situation to exerciseResult to checkEvidence to retain
An inventory contains only a product name.Identify version, edition, deployment and owner before determining support status.Installed reference and official policy for that edition.
A vendor changes a previously recorded support date.Update the dated reference, dependencies and plan; distinguish announced dates from observed state.Policy URL, consultation date and revised decision.
An upgrade works but rollback fails.Test restoration, data compatibility and dependencies before declaring migration controlled.Test timeline, backup used and recovery outcome.

Reusable worksheet

Complete with your authorised observations. These fields are a working template, not observed results.

FieldInformation to record
ProductEdition, version, environment and owner
SupportOfficial source, conditions and review
ImpactDependent services and data
ActionDecision, evidence, deadline and exception

Worked example

Illustrative situation

Fictional example: a support notice covers a different edition of a module from the one deployed.

Decision and expected evidence

The team verifies its contract, tests a compatible version and retires the old instance after business acceptance.

Distinguish the mechanisms

MechanismPurposeCheck or limitation
Installed versionDescribe operational stateObserve actual systems
Support contractDefine commitmentsMay cover specific editions only
Migration planOrganise changeValidate with an executed task

Management indicators

IndicatorWhat it measuresFirst action
Identified versionsInstances linked to versionsResolve unknowns
Verified supportEditions with supplier evidenceReview stale records
Proven retirementsOld instances actually closedReconcile inventory with use

Common pitfalls

  • Observe actual systems
  • May cover specific editions only
  • Validate with an executed task

Frequently asked questions

Must all old software be replaced?

No. Assess maintenance, exposure, usefulness and dependencies. Age alone does not determine priority.

What if support dates are unknown?

Record the gap, contact the supplier and set a review. Do not borrow dates from another product.

Does an exception remove risk?

It makes the decision explicit. Record controls, ownership and duration, then reassess it.

Official references

References consulted: . The method and worksheet propose checks to adapt to your context; they do not constitute certification.