Based on the context, Standard 8: Unsupported Systems has the following evidence requirement [1]:
For a two-person start‑up, this is straightforward. You need to create a simple IT Asset Register that lists every device and software package used, its version, and whether it is still supported by the vendor.
Maintain this in a secure spreadsheet (e.g., alongside your other compliance logs).
| Asset Type | Asset Name / Description | Operating System / Version | Software Installed (with version) | Support Status (Supported / Unsupported / End‑of‑Life) | Support End Date (if known) | Owner | Last Review Date |
|---|---|---|---|---|---|---|---|
| Laptop 1 | Director A – Dell Latitude 5430 | Windows 11 Pro 23H2 | Microsoft 365 Apps v2024; Chrome v128; Antivirus v5.0 | Supported | – | Director A | [dd/mm/yy] |
| Laptop 2 | Director B – MacBook Air 2022 | macOS Sonoma 14.6 | Microsoft 365 Apps v2024; Safari; Antivirus v4.2 | Supported | – | Director B | [dd/mm/yy] |
| Cloud Service | Microsoft 365 Business Basic | – | – | Supported (Microsoft) | – | Both Directors | [dd/mm/yy] |
| Router/Firewall | BT Business Hub | Firmware v3.2 | – | Supported (ISP) | – | Director B | [dd/mm/yy] |
Instructions for use:
Why this matters:
Once you have populated this register, you will satisfy the mandatory evidence for Standard 8 [1]. Would you like to move on to Standard 9: IT Protection, or do you need any refinement on this template?