2cac8686_plication_Security_and_Privacy__Derived_Security_Controls
Exposure of decommissioned software/services [Derived Security Controls] 
Maintain a schedule of all software/services in use Ensure all system components (hardware, software, configuration files, databases, files, services, ports, DNS records, etc) are decommissioned when no longer needed, and maintain a record of how this was undertaken Test/audit that decommissioned components no longer exist and cannot be accessed For hardware disposal, ensure data is securely removed
Privacy : Application Security and Privacy
Derived Security Controls