Home / Drivers / Vendor end-of-life
D/08

The system has an expiry date.
Your operation doesn't.

A core product is losing support, becoming insecure or being withdrawn. The business now has a deadline for replacing something it may not fully understand but cannot operate without.

What changed

A tolerated dependency has become an active business risk.

Legacy software often survives because it works, the people around it know its limits and replacing it would compete with more visible priorities. End-of-life changes the balance. Security updates, specialist support and compatibility can no longer be assumed.

The obvious response is to choose the nearest replacement and migrate. But the old system may contain years of business rules, exceptions and integrations that no product comparison captures. Recreating everything preserves the past; ignoring it risks disrupting the operation.

The deadline creates urgency, but it also creates an opportunity to decide which parts of the old system are valuable, which are accidental and which should never be carried forward.

What is at stake

The same event can create exposure or advantage.

The fear

Time removes the company's ability to choose.

A failure, audit finding or disappearing specialist forces a hurried migration, and the business accepts a poor fit because continuity has become the only criterion.

The ambition

The deadline becomes a deliberate reset.

The company protects continuity while moving towards an architecture it can understand, support and change on its own timetable.

Warning signs

How the constraint shows up.

01

The vendor has announced a support, hosting or product withdrawal date.

02

Security or operating-system updates can no longer be applied safely.

03

Only a small supplier or former employee understands the system.

04

Important integrations depend on undocumented database access or file transfers.

05

The business avoids process changes because nobody knows what the application will break.

06

Replacement estimates assume requirements that have not been tested with operational users.

The usual response

Replacing like for like can preserve the constraint for another decade.

01

Extend support

This may buy useful time when it funds investigation and risk reduction rather than postponing the same decision.

02

Buy the nearest successor

A supported product can reduce technical risk, but only if it can carry the necessary rules, data and integrations.

03

Rewrite the entire application

A full rebuild may reproduce obsolete behaviour and delay value unless the system can be separated into safer, testable parts.

Before commissioning software

Recover the knowledge before selecting the replacement.

Treat the existing system as evidence of how the business evolved, not as a specification for what comes next.

Q/01

Which operational outcomes and controls genuinely depend on the system?

Q/02

What rules live in code, data, integrations or the habits of experienced users?

Q/03

Can risk be reduced through containment, interfaces or staged replacement?

Q/04

Which target capabilities should be bought, and which need to remain under direct control?

The right answer may be to change the process, configure a product, integrate what you already have, modernise one part or build an owned capability. ORBN helps make that decision before it helps deliver it.

Own how you operate

Own the timetable and the knowledge behind the migration.

The business does not need to own every product it uses. It does need enough control of its data, rules and interfaces to avoid another supplier decision becoming an existential deadline.

OWN / 01

A tested understanding of the business rules and operational outcomes being preserved.

OWN / 02

Accessible data and documented interfaces that reduce future exit cost.

OWN / 03

A staged transition and recovery path that keeps the operation running.

Relevant evidence and capabilities
Other reasons the question begins

What else changed?

What changed?

Make the systems decision
before the deadline makes it for you.

Bring the end-of-life date, the known dependencies and the questions nobody can yet answer. We will help frame a safe route forward.