Extend safely
Stabilize and maintain the current platform for a defined horizon with bounded remediation, isolation, tests, monitoring, support, and known residual risk.
- Suitable when
- Appropriate when risks can be controlled, required dependencies can be maintained or isolated, replacement risk is greater, and the support horizon is explicit.
- Principal constraints
- Remaining security exposure, hardware supply, vendor status, testability, specialist knowledge, support capacity, and a clear end condition.