• Statement 40: Create a decommissioning plan

  • Statement 40: Create a decommissioning plan 

  • Agencies must

    • Criterion 142: Define the scope of decommissioning activities.

      Decommissioning plans clearly identify the system components being shut down, disabled, reused, or repurposed and the reason for decommissioning.

      Ensure compliance with Information management for records created using Artificial Intelligence (AI) technologies | naa.gov.au.

    • Criterion 143: Conduct an impact analysis of decommissioning the target AI system.

      Assessing the potential impacts on an agency’s business operations, stakeholders and compliance obligations allows for the identification of dependencies, risks and any alternative solutions required to maintain service continuity.

    • Criterion 144: Proactively communicate system retirement.

      This involves:

      • informing all affected parties – employees, partners, and users about the decommissioning schedule, reasons for decommissioning, and any expected impacts
      • addressing any issues or concerns
      • providing support and information about alternative systems, and any forecast implementation schedules
      • considering a retrospective review of the AI system's performance and lifecycle to provide valuable insights for future projects. The review should involve analysing the system's successes, challenges, and areas for improvement. 
         
  • Statement 41: Shut down the AI system

  • Statement 41: Shut down the AI system

  • Agencies must

    • Criterion 145: Retain AI system compliance records.

      Any records related to an AI system, including those generated during retirement, must be preserved for agencies to demonstrate compliance and effectively respond to future audits and inquiries.

    • Criterion 146: Disable computing resources or components specifically dedicated to the AI system.

    • Criterion 147: Securely decommission or repurpose all computing resources dedicated to the AI system, including individual and shared components.

      This involves:

      • systematically shutting down and wiping servers, storage devices, and network components
      • identifying which system or network components will be repurposed, and disconnecting or reconfiguring accordingly
      • terminating instances and services associated with cloud resources, ensuring no data remains.
         
  • Statement 42: Finalise documentation and reporting

  • Statement 42: Finalise documentation and reporting

  • Agencies must

    • Criterion 148: Finalise decommissioning information and update organisational documentation.

      This involves:

      • recording all decommissioning information in the final system documentation, compiling records of decommissioning activities, decisions, and lessons learnt
      • delivering a final report to relevant stakeholders
      • providing all documentation related to the decommissioning of the AI system or components, including detailed accounts of:
        • the decommissioning process
        • compliance adherence
        • implications for ongoing operations.
           
  • Evaluate: statements 26 - 30

Connect with the digital community

Share, build or learn digital experience and skills with training and events, and collaborate with peers across government.