Recital 8 Legacy ICT systems

To ensure a proper management of the legacy ICT systems means an ICT system that has reached the end of its lifecycle (end-of-life), that is not suitable for upgrades or fixes, for technological or commercial reasons, or is no longer supported by its supplier or by an ICT third-party service provider, but that is still in use and supports the functions of the financial entity; risk means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident;, financial entitiesas defined in Article 2, points (a) to (t) should record and monitor end-dates of ICT third party support services. Because of the potential impact that a loss of confidentiality, integrity and availability of data may have, financial entitiesas defined in Article 2, points (a) to (t) should focus on those ICT assets means a software or hardware asset in the network and information systems used by the financial entity; or systems that are critical for business operation when recording and monitoring those end-dates.