What is system decommissioning?
System decommissioning is the controlled retirement of a server, service, or application. It includes migrating or deleting its data, revoking its credentials, removing DNS records and network access, and updating the asset inventory. Skipped steps leave forgotten systems that attackers can find.
What the buyer is really asking
When you retire a server, database, or service, what happens to its data, credentials, and DNS records? Buyers want a checklist, because forgotten systems are a common way in.
Other ways buyers ask it
Every one of these wants the same answer:
- “What is your process for decommissioning systems?”
- “How do you retire services and the data they hold?”
- “Are credentials revoked when a system is decommissioned?”
Evidence to have ready
- A decommissioning checklist
- Change records for a recently retired system
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.
Related asset and endpoint management questions
- How do you inventory and track hardware and software assets?
- How are company endpoints (laptops and workstations) managed, inventoried, and secured?
- What protections are enforced on managed endpoints (anti-malware, firewalls, disk encryption, screen lock, remote wipe, DLP)?
- What are the allowances and conditions for acceptable use of organization-owned or managed assets?