Which recordkeeping item is essential after securely decommissioning an OT asset?

Which recordkeeping item is essential after securely decommissioning an OT asset?

• A. Destroy asset from inventory without documenting.
• B. Collect proof of disposal and update asset inventories and change logs.
• C. Only disable network access; no records needed.
• D. Sell the asset to a third party.

Answer: (B)

After securely decommissioning an OT asset, you must have an auditable record that the asset was disposed of and that your inventories and change logs reflect its removal. Collecting proof of disposal—such as a destruction certificate, disposal receipt, or a decommissioning report—provides a verifiable trail of what happened to the asset, who authorized it, and when it occurred. Updating the asset inventory and change logs ensures the asset’s current status is accurately reflected, preventing reuse, loss, or confusion in asset management and security audits. Relying on just disabling network access leaves no verifiable record of disposal and can hide the asset’s lifecycle. Destroying the asset without documentation similarly creates a gap in accountability. Selling to a third party introduces additional steps and risk, which still require proper disposal proof and record updates to maintain control and traceability.

After securely decommissioning an OT asset, you must have an auditable record that the asset was disposed of and that your inventories and change logs reflect its removal. Collecting proof of disposal—such as a destruction certificate, disposal receipt, or a decommissioning report—provides a verifiable trail of what happened to the asset, who authorized it, and when it occurred. Updating the asset inventory and change logs ensures the asset’s current status is accurately reflected, preventing reuse, loss, or confusion in asset management and security audits.

Relying on just disabling network access leaves no verifiable record of disposal and can hide the asset’s lifecycle. Destroying the asset without documentation similarly creates a gap in accountability. Selling to a third party introduces additional steps and risk, which still require proper disposal proof and record updates to maintain control and traceability.