+AM-07.01B

AM-07.01B

The cloud service provider defines, documents and implements a procedure for the decommissioning of hardware used to operate system components supporting the cloud service production environment under the responsibility of the cloud service provider. As part of this procedure, approval by authorised personnel of the cloud service provider based on the applicable policies is required.

Supplementary information

The decommissioning procedure typically includes:

1. Verification that the asset is no longer required for operational use;

2. Assessment of associated risks and dependencies;

3. Approval by authorised personnel based on internal policies;

4. Execution of secure data deletion or sanitization processes;

5. Updating the asset inventory to reflect decommissioning status; and

6. Disposal or repurposing of the hardware in accordance with environmental and security guidelines.

Supplementary information

This criterion is not applicable for hardware components that do not store cloud service customer data, cloud service derived data, cloud service provider data or account data (e.g. monitors, routers or keyboards).

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
is blocked by Decommissioning