2.8 Develop a Decommission Plan

Review and understand contract language of legacy system to determine decommissioning activities, including licensing expirations, contract expirations, options to extend, etc. for both software and infrastructure contracts, and the O&M support contracts

Identify application components (i.e. classify components to be decommissioned such as testing or production environments, systems user IDs, and business app)

Ascertain hardware components - if applicable (i.e. ascertain where infrastructure is in its maintenance/resource life cycle)

Pinpoint network devices

Work with system owner, Agency Privacy Officer, and other key stakeholders of the legacy system to establish how far back to archive data, what data will be migrated, and timelines for migration

Identify any records to be disposed of in accordance with the records retention schedule

Identify network, software and hardware location/ownership (i.e. activities include but are not limited to population of assets, management of data stores and development and validation of assets)

Prioritize decommission effort (i.e. which components are simple versus complex to offline)

Identify failover/offline procedures (i.e. have components backup/archive current state been verified)

Coordinate with agency IT Security office to identify guidelines for managing/cleansing the data

Draft Decommission Plan with timelines and key activities for retiring legacy system (based on activities noted above)