The purpose of this policy is to mitigate increasing risks of compromise to agency data, networks and systems arising from the end of support for Microsoft Windows XP and Office 2003. Effective April 8, 2014, Microsoft will no longer provide automatic fixes, security updates or online technical assistance for these products. This policy establishes how to comply with the OCIO IT Security Standard regarding Windows XP and Office 2003 end of life.
By April 8, 2014, agencies must migrate off all instances of Office 2003, migrate all Windows XP Personal Computers (PCs) to newer platforms, and secure any remaining machines until migration is complete. Security controls in this policy are intended to protect any remaining XP PCs from attack and prevent the spread of attack to agency networks and systems.
Academic and research applications and infrastructure at institutions of higher education are exempt.