Secure decommissioning

Switching a system off is not the same as removing it.

The DNS record still points somewhere, the firewall rule still exists, the service account still works, the data still sits on storage, the certificate is still valid and the supplier contract still runs. Decommissioning is a checklist and it rarely gets one, which is why forgotten systems are such a reliable route in.