4.6. Server Decommissioning

💡 First Principle: Decommissioning is not simply "turn it off." A server being retired still contains potentially sensitive data and software licenses. The decommissioning process must ensure data is destroyed beyond recovery, licenses are returned or transferred, assets are documented as retired, and hardware is disposed of responsibly.

Decommissioning failures are data breaches. A server resold with intact drives is a gift to the buyer—and a liability for the organization.