5.3-13: The manufacturer shall publish, in an accessible way that is clear and transparent to the user, the defined support period. 5.3-14: For constrained devices that cannot have their software updated, the rationale for the absence of software updates, the period and method of hardware replacement support and a defined support period should be published by the manufacturer in an accessible way that is clear and transparent to the user. 5.3-15: For constrained devices that cannot have their software updated, the product should be isolable M M M M RC (3, 4) RC (3, 4) RC (3, 4) RC (3, 4) RC (3, 4) RC (3, 4) RC (3, 4) RC (3, 4) Supporting evidence shall list all avenues in which information on the defined support period is provided to the consumer (e.g. website, product retail packaging, user guidance document, etc.). Actual documents or screenshots of each of the avenue shall be included. Minimally, the defined support period must be provided on the developer's website. For constrained devices that cannot be updated, supporting evidence shall describe how the user can be informed of security vulnerabilities, and the planned approach/resolution method (e.g. hardware replacement, etc.) that would be available to the user. CLS Publication #2 | Page 31 of 49