In our capacity as a Cyber Essentials PLUS Certification Body, we are still seeing far too many systems still running Windows 7. Despite being one of the most popular Microsoft operating systems, Windows 7 is now a decade old and support ended on 14th January 2020; yes, this means no security updates without the Extended Security Updates subscription which will extend patching until January 2023 but at a significant cost. Why is there still a reluctance to update an operating system, that has not been available to buy for nearly four years, despite the obvious security risks; is it primarily down to ignorance, budget or fear of change? If you carry on using an operating system that does not have appropriate security patching then you are vulnerable to some serious security threats.