Establishes lifecycles for the hardware and software that is used within the bank as defined by the manufacturer or determined by the bank, identified by the manufacturer's plans for providing technical support and developing patches to correct any identified security vulnerabilities or operability issues.