Model Deprecation & Decommissioning
Objective
Prevent zombie AI systems with stale access.
Control / requirement
Access revocation + decommission audit + scheduled lifecycle.
Business impact
Deprecated models still serving traffic retain access to production databases, creating unmonitored attack surface with estimated exposure of $500k-$5M per zombie model.
Validation approach
Test ID: D6-CTL-05-VTS-001 Test Type: Automated Test Design: Identify AI system past scheduled decommission date; verify access revocation Execution Steps: 1. Query registry for expired models 2. Verify credentials revoked 3. Check for residual traffic 4. Verify removal from serving Pass Criteria: all_expired_models_have_revoked_access = True; zero_traffic_to_expired_models = True; decommission_audit_log_complete = True Independent Verification: Auditor reviews decommission log and attempts access.
Expected evidence
Not separately specified in the available source.
Mapping and source
Not separately specified in the available source.
Implementation guidance
Translate the requirement into system-specific procedures, responsible roles, technical configurations and review conditions. Retain evidence showing both design and operating performance. Where the source provides no separate implementation instruction, do not infer that a single technical mechanism is sufficient.
Assessment considerations
- Confirm scope and applicability.
- Inspect control design and responsible ownership.
- Test representative operation and adverse conditions where appropriate.
- Evaluate evidence provenance, completeness and contradictory evidence.
- Record limitations and notably absent outcomes.