The permitting system's entity is being decommissioned and will no longer process applications. What should happen to its scoped risks?
Select an answer to reveal the explanation.
Short Explanation
No entity, no live risk — retire the scoped risks when the permitting system goes dark so the register is not haunted by ghosts.
Full Explanation
When the permitting system entity is being decommissioned and will no longer process applications, close or retire the related risks so the register stays accurate for active civic services. Keeping every risk active forever as historical decoration fails by concept because immortal active risks distort dashboards and ownership. Reassigning all retired-entity risks to a random active entity without review fails by concept because arbitrary reassignment falsifies which service bears the exposure. Converting decommissioned-entity risks into open audit engagements automatically fails by concept because decommissioning is not an audit trigger by default. Exam caveat: CIS-RC retires or closes risks when their entity leaves service rather than leaving them active indefinitely. Operational check: after permitting-system decommission, retire or close related risks with rationale, confirm they no longer appear as active on operational dashboards, and retain historical records for audit trail. In civic IRM programs, retain configuration and decision evidence so examiners can reconstruct why this design supports public services. In civic IRM programs, retain configuration and decision evidence so examiners can reconstruct why this design supports public services.