Decommissioning assets www.ncsc.gov.uk/guidance/…

This guidance describes why it’s important for organisations to decommission digital assets, and how to do so securely. It’s aimed at technical staff and risk owners. For advice dealing specifically with decommissioning hardware, please refer to our guidance on discontinuing obsolete products or network devices.

Decommissioning involves retiring digital assets - such as data, software, or hardware - from operation. It is a critical phase in the lifecycle of any asset. Decommissioning can be highly expensive and complex, with potentially severe repercussions if not executed properly.

Outdated or unsupported assets can pose an unacceptable risk to the organisation. As the NCSC guidance on asset management explains, assets that are no longer required become liabilities because they can open up vulnerabilities or expose information. Decommissioning helps to reduce unnecessary risks.