Modern Lifecycle Policy is Microsoft’s support model for products that are expected to stay on current, supported versions and receive regular updates. Unlike older fixed-lifecycle products, software under this policy is maintained only while customers keep up with servicing requirements, which can include installing updates, meeting minimum version rules, and using supported configurations.
This matters in cyber security because support status affects patch availability. If an organization falls behind, it may lose access to security fixes, compatibility updates, or vendor assistance, leaving exposed systems easier to target. Attackers often look for products running outdated builds because those environments are more likely to contain known vulnerabilities and weaker defensive controls. For defenders, Modern Lifecycle Policy turns patch management into a security requirement, not just an IT maintenance task, especially for infrastructure software such as email, identity, and management platforms.