Lifecycle
Retirement
2 controls apply at this stage.
- preventive
AI-CTRL-015
Data Retention and Deletion for AI Systems
Define and enforce retention and deletion of AI-related data (training datasets, fine-tuning data, embeddings, prompts, completions, model artifacts, logs) per a documented schedule aligned to legal, regulatory, and operational requirements.
Data GovernanceISO 42001 NIST AI RMF EU AI Act OWASP DSGAI +3v1.0.0 Reviewed 2026-05-01 - corrective
AI-CTRL-018
AI System Decommissioning
Ensure that AI system decommissioning follows a documented procedure addressing dependent system continuity, data retention/deletion, model artifact handling, vendor termination assistance, documentation preservation, and stakeholder communication.
Model LifecycleISO 42001 NIST AI RMF EU AI Act OWASP DSGAI +3v1.0.0 Reviewed 2026-05-01