The UK’s National Cyber Security Centre (NCSC), an arm of GCHQ, urged IT managers to begin planning for the end of free Windows 7 updates now, so that their systems are not at risk.

Systems running Windows 7 will no longer receive free updates as of 14th January 2020. NCSC explained that an unsupported version of Windows 7 would leave computers without vital security updates thus exposing them to harmful viruses, spyware, and other malicious software capable of stealing sensitive data.

Using Windows XP as an example, the NCSC pointed out that, after the service ended, cyber attackers rapidly began exploiting the outdated version of the platform.

Read more: Edinburgh Napier Cybersecurity Course Backed by NCSC

“It wasn’t long after that before exploitation of the final version of the platform became fairly widespread,” the NCSC explained. “Malware can spread much more easily on obsolete platforms because, without security updates, known vulnerabilities will remain unpatched. As a result, it’s crucial to move away from them as quickly as possible.

“We know there are costs involved in keeping up-to-date. However, doing so is one of the most effective ways of keeping your networks and devices secure – this is why planning your upgrades far in advance is especially important.”

Although the NCSC strongly advocates migrating off Windows 7, it acknowledges some may struggle to meet the deadline and offers practical steps they can take to minimise the risk of using obsolete platforms.

These include preventing access to untrusted services and removable media, converting systems to thin clients, removing access for remote workers and applying anti-malware and intrusion detection tools.

If an organisation is determined to continue using Windows 7, they can purchase Microsoft’s Extended Security Updates, which will be costed per device – this cost will increase annually until January 2023.

Another option is to purchase Windows Virtual Desktop service, virtualising Windows 7 on Azure VMs. This option comes with free essential system updates but will only be available for three years.

These are not permanent solutions and are only meant as a temporary support for legacy systems while an organisation transitions to Windows 10.