COST04-BP02 Implement a decommissioning process
Implement a process to identify and decommission orphaned resources.
Level of risk exposed if this best practice is not established: High
Implementation guidance
Implement a standardized process across your organization to identify and remove unused resources. The process should define the frequency searches are performed, and the processes to remove the resource to ensure that all organization requirements are met.
Implementation steps
-
Create and implement a decommissioning process: Working with the workload developers and owners, build a decommissioning process for the workload and its resources. The process should cover the method to verify if the workload is in use, and also if each of the workload resources are in use. The process should also cover the steps necessary to decommission the resource, removing them from service while ensuring compliance with any regulatory requirements. Any associated resources are also covered, such as licenses or attached storage. The process should provide notification to the workload owners that the decommissioning process has been executed.
Resources
Related documents:
