Revoke the service account and disable vendor connector: Which missing control is most direct?
Retirement requires removing the obsolete system’s active credentials and external connections, not merely archiving records or notifying users.
The question
A financial-document processing system is being retired after replacement by a newer service. Assume retention, incident handling, replacement validation, and decommissioning approval are complete. The old system’s service account still authenticates to an internal repository, and its vendor connector remains enabled. Which missing control is most direct?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Revoke the service account and disable vendor connector access. ✓Revoking credentials and disabling the connector directly terminate the retired system’s remaining access and external dependency.
- Notify users that the replacement service is available.User notification supports transition management, but it leaves the retired system’s credentials and dependencies operational.
- Archive the retired system’s performance reports.Archiving reports preserves historical evidence but does not remove active pathways into repositories or vendor services.
- Transfer the old system’s repository permissions to the replacement service after review.Permission transfer may support the replacement, but it does not itself disable the retired system’s existing authentication path.
The trap
For retirement scenarios, distinguish preserving evidence from disabling credentials, connectors, and other active dependencies. How to remember it
Retirement requires removing the obsolete system’s active credentials and external connections, not merely archiving records or notifying users.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Link delayed labels to predictions for outcome monitoring: Which missing control most directly addresses this →
- Provide accessible notices describing purpose: Which missing control is most direct? →
- Create a defined escalation route for contested: Which missing control most directly addresses the contested →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.
