Oasis Members Propose Global Framework for Product End-of-Life Security Disclosures

In a bid to standardise how companies communicate product end-of-life (EOL) cybersecurity risks, members of the Oasis consortium have released a white paper outlining a proposed global framework for coordinated disclosures.

The document, titled “Advancing a Global Framework for Coordinated Product End-of-Life Security Disclosures,” aims to address the growing challenge of insecure devices and software that remain in use long after vendors cease support.

Bridging the Gap in EOL Security

As technology evolves, older products often lose vendor support, leaving users vulnerable to unpatched security flaws. The Oasis white paper highlights the lack of a unified approach to EOL notifications, which can lead to confusion and increased cyber risks.

“Currently, there is no standardised way for vendors to communicate product end-of-life timelines or for organisations to plan accordingly,” the paper states. “This inconsistency creates unnecessary security gaps that threat actors can exploit.”

The proposed framework encourages vendors to adopt transparent, structured disclosures, including clear EOL dates, risk assessments, and migration guidance. It also calls for collaboration between manufacturers, regulators, and cybersecurity professionals to ensure smoother transitions.

Industry Leaders Weigh In

Key contributors to the white paper include cybersecurity experts from IBM, Cisco, and several academic institutions. Their recommendations emphasise proactive risk management and stakeholder alignment.

“End-of-life disclosures shouldn’t be an afterthought,” said one industry participant quoted in the report. “A harmonised approach ensures businesses and consumers can make informed decisions about their technology investments.”

Next Steps for Adoption

While the framework is still in its early stages, Oasis members hope it will spark broader industry discussions and eventual adoption by standards bodies. The consortium plans to host workshops and seek feedback from global stakeholders to refine the proposal.

For now, the white paper serves as a critical starting point for addressing a pervasive issue in tech sustainability and security.

Read the full white paper here: Oasis Consortium EOL Framework