The Signs It Is Time
Age alone is not the trigger. A ten-year-old system doing its job is a system doing its job. The real signs are operational: you cannot remove a leaver's access without an engineer visit. Nobody can pull a record of who went through a door. The software runs on one aging computer nobody dares restart. Replacement credentials cost silly money because the format is obsolete. Managing the system has quietly become someone's part-time job.
When the system starts costing you in workarounds, admin time and unmanageable risk, the upgrade conversation has already started whether you have scheduled it or not.

