New Zealand Information Security Manual (NZISM)

Chapter 13: Media and IT Equipment Management, Decommissioning and Disposal – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 13.1.10.C.04: 13.1.10.C.04 Identify and terminate related service and legal agreements

Agencies should find the service and legal agreements that relate to the system being migrated or decommissioned and arrange for those agreements to be ended.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter 13: Media and IT Equipment Management, Decommissioning and Disposal – New Zealand Information Security Manual (NZISM)

13.1.10.C.01 13.1.10.C.01 Proportionate risk assessment before migration or decommissioning
13.1.10.C.02 13.1.10.C.02 Required elements of the migration risk assessment
13.1.10.C.03 13.1.10.C.03 Consider a Privacy Impact Assessment for migration
13.1.11.C.01 13.1.11.C.01 Contents of the system decommissioning plan
13.1.12.C.01 13.1.12.C.01 Identify retention policies and laws before archiving
13.1.12.C.02 13.1.12.C.02 Archive adequate system documentation on decommissioning
13.1.12.C.03 13.1.12.C.03 Archive software and data needed for recovery
13.1.13.C.01 13.1.13.C.01 Accreditation Authority confirms IA compliance at decommissioning

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All New Zealand Information Security Manual (NZISM) controls