Which sequence constitutes a secure decommissioning of an OT asset?

Which sequence constitutes a secure decommissioning of an OT asset?

• A. Disconnect from network and delete the asset from accounting only.
• B. Disconnect from network, wipe data, destroy credentials.
• C. Physically destroy the asset without updating inventories.
• D. Remove from network, wipe data, destroy credentials, collect proof of disposal, and update asset inventories and change logs.

Answer: (D)

Secure decommissioning of an OT asset combines removing all access, sanitizing data, ensuring there is verifiable disposal, and keeping accurate records. Disconnecting the asset from the network stops any ongoing or future remote control or monitoring, which is essential to prevent unauthorized access. Wiping the data eliminates sensitive configurations, logs, and other information that could be misused if recovered. Destroying credentials prevents any reuse of accounts or tokens tied to the asset, closing off entry points that could be exploited later. Collecting proof of disposal provides a verifiable trail for audits and compliance, ensuring stakeholders can confirm the asset was handled properly. Updating asset inventories and change logs ensures the organization’s records reflect the disposal, prevents orphaned assets, and supports ongoing security governance. Other options miss one or more of these critical elements, creating gaps in security, traceability, or governance.

Secure decommissioning of an OT asset combines removing all access, sanitizing data, ensuring there is verifiable disposal, and keeping accurate records. Disconnecting the asset from the network stops any ongoing or future remote control or monitoring, which is essential to prevent unauthorized access. Wiping the data eliminates sensitive configurations, logs, and other information that could be misused if recovered. Destroying credentials prevents any reuse of accounts or tokens tied to the asset, closing off entry points that could be exploited later. Collecting proof of disposal provides a verifiable trail for audits and compliance, ensuring stakeholders can confirm the asset was handled properly. Updating asset inventories and change logs ensures the organization’s records reflect the disposal, prevents orphaned assets, and supports ongoing security governance.

Other options miss one or more of these critical elements, creating gaps in security, traceability, or governance.