Statement 41: Shut down the AI system
Agencies must
Criterion 145: Retain AI system compliance records.
Any records related to an AI system, including those generated during retirement, must be preserved for agencies to demonstrate compliance and effectively respond to future audits and inquiries.
- Criterion 146: Disable computing resources or components specifically dedicated to the AI system.
Criterion 147: Securely decommission or repurpose all computing resources dedicated to the AI system, including individual and shared components.
This involves:
- systematically shutting down and wiping servers, storage devices, and network components
- identifying which system or network components will be repurposed, and disconnecting or reconfiguring accordingly
- terminating instances and services associated with cloud resources, ensuring no data remains.