TITAN AI · CONDUIT Agent

CONDUIT TICKET REPORT

CHG0030100

TICKET

TICKET Azure Critical Assigned

Opened by TITAN AI · CONDUIT · Scanner found the finding, CONDUIT forwarded this ticket via CONDUIT generic-API layer, assigned security_engineering, populated every ticket field, The ticket is routed and awaiting team approval — CONDUIT will update it after TITAN FORGE applies the fix.

Finding Summary

Short description: [TITAN] Critical — legacy_eol on vm-pacs-imaging-01
Severity: Critical
Priority: 1 - Critical
Resource: vm-pacs-imaging-01
Resource type: Microsoft.Compute/virtualMachines
Cloud: Azure
Subscription / Account: 4f29d094-1079-44c9-acb0-4d73a7a2dd34
Resource group / Project: rg-legacy-prod

The Security Finding

Windows Server 2008 R2 Datacenter detected — past end-of-life 2020-01-14 (2290 days). ESU enrollment not detected. Hosting PACS medical imaging workload (PHI). Fails HIPAA 164.308(a)(5)(ii)(B), PCI DSS 6.2, SOX ITGC-VR, NIST 800-53 SI-2.

ITIL Change Management Fields

Justification

Critical: Windows Server 2008 R2 Datacenter detected — past end-of-life 2020-01-14 (2290 days). ESU enrollment not detected. Hosting PACS medical imaging workload (PHI). Fails HIPAA 164.308(a)(5)(ii)(B), PCI DSS 6.2, SOX ITGC-VR, NIST 800-53 SI-2.

Implementation Plan

1. Pre-change snapshot captured by TITAN (auto-rollback available).
2. Execute fix command:
   Enroll in Windows Server 2008 Extended Security Updates (ESU expired 2023-01-10 — escalation path only). Plan Azure VM migration to Windows Server 2022. Isolate via NSG until cutover. Compensating control pack auto-generated.
3. TITAN FORGE verifies the fix was applied.
4. Post-change rescan by TITAN SCOUT — finding must no longer appear.
5. Close ticket with Successful close_code.

Risk & Impact Analysis

Risk level: HIGH business risk — active exposure; fix required immediately.
Business impact if unremediated: Potential data exfil, privilege escalation, or compliance breach.
Scope: single resource (vm-pacs-imaging-01).
Blast radius: change is idempotent; pre-change snapshot captured by TITAN; auto-rollback available if rescan fails.
Finding detail: Windows Server 2008 R2 Datacenter detected — past end-of-life 2020-01-14 (2290 days). ESU enrollment not detected. Hosting PACS medical imaging workload (PHI). Fails HIPAA 164.308(a)(5)(ii)(B), PCI DS

Backout / Rollback Plan

1. TITAN auto-captured snapshot of vm-pacs-imaging-01 before change (baseline: titan-legacy-demo-20260422T201927Z).
2. If post-change rescan still shows the finding OR a new issue appears within 15 min:
   a. TITAN FORGE fires rollback automatically using stored snapshot.
   b. Incident reopens and escalates to on-call.
3. Manual rollback command path (human override) is documented in close notes.

Test Plan

1. TITAN SCOUT rescans vm-pacs-imaging-01 immediately after FORGE applies the change.
2. PASS criteria: the specific finding no longer appears in SCOUT results.
3. PASS criteria: no new CRITICAL or HIGH findings introduced by the change.
4. Automated compliance check: HIPAA/PCI/SOC2 controls re-evaluated.
5. If any check fails, backout plan fires automatically.

Recommended Fix

Enroll in Windows Server 2008 Extended Security Updates (ESU expired 2023-01-10 — escalation path only). Plan Azure VM migration to Windows Server 2022. Isolate via NSG until cutover. Compensating control pack auto-generated.

Compliance Mapping

CIS BenchmarkSOC 2 CC6.1

Routing Metadata

Assignment group: security_engineering
Change type: Emergency
Approval required: Yes
Planned start: 2026-04-22 20:33:27
Planned end: 2026-04-22 22:33:27
Scan ID: titan-legacy-demo-20260422T201927Z
Generated at: 2026-04-22T20:19:27+00:00
Opened: 2026-04-22 20:19:27
Closed: 2026-04-22 20:19:27
Close code: —

Attached Security Ticket

SERVICENOW · TICKET

SEC-1807 · [TITAN] Critical — legacy_eol on vm-pacs-imaging-01

Priority: Critical TICKET Azure

Ticket Description

Windows Server 2008 R2 Datacenter detected — past end-of-life 2020-01-14 (2290 days). ESU enrollment not detected. Hosting PACS medical imaging workload (PHI). Fails HIPAA 164.308(a)(5)(ii)(B), PCI DSS 6.2, SOX ITGC-VR, NIST 800-53 SI-2.

Recommended Fix: Enroll in Windows Server 2008 Extended Security Updates (ESU expired 2023-01-10 — escalation path only). Plan Azure VM migration to Windows Server 2022. Isolate via NSG until cutover. Compensating control pack auto-generated.

AI Close Notes

TITAN CONDUIT opened this critical legacy_eol ticket and assigned it to the security_engineering group for review. STATE: ASSIGNED — awaiting human action. Per TITAN AI policy, configuration changes are NEVER auto-applied and tickets are NEVER auto-closed by TITAN. The assigned group reviews the recommended fix, schedules an approved maintenance window, applies the fix manually, validates via SCOUT rescan, and closes this ticket themselves. TITAN documents and routes — the human owns the change from here.