

I'm sure Apple has a policy, but it's clearly not released to the public and probably gets re-evaluated constantly based on many factors.

So, knowing a product's expected support lifecycle (and, especially, if it has already expired) is critical to continuing to maintain compliance with this control.ĭoes Apple provide this information anywhere online for the general public? What versions are currently supported (current version being Lion), and how long (presuming no change to the policy) will they continue to be supported? For systems running OS's that are beyond their support lifecycle, we cannot be reliably expected to correct discovered vulnerabilities because the vendor will no longer supply patches. identifies, reports, and corrects information system flaws". The National Institute of Standards and Technology of the Department of Commerce of the United States of America states in this document: NIST SP 800-53, control SI-02 (Flaw Remediation) that there are requirements that (among other things) "The organization. My concern here is primarily from a security standpoint. Further confounding the issue are some relatively recent posts claiming they still receive security updates for versions as old as 10.2. Does Apple have a policy regarding how long they will continue to release and support security fixes for each OS X release? I've looked around the Internet, and found some forum posts that claim "only for the current, and most recent previous, versions" but none appear to have an official reference.
