Once a year, properly.
INVENTORY
Every service listed, with cost, owner and data held Anything unused identified for cancellation Overlapping tools identified
COST
Annual spend, in your currency, against budget Committed pricing reconsidered for steady workloads Right-sizing reviewed
DATA
What personal data is held where What can be deleted Retention periods applied
ACCESS
Every account and role reviewed Every key and credential reviewed and rotated Departed people confirmed removed
RESILIENCE
Exports tested for usability Account recovery tested Continuity plan updated
CONTRACTS
Renewal dates and notice periods diarised Terms changes reviewed
THE QUESTION FOR EACH SERVICE
Would we adopt this again today, at this price and on these terms?
WHAT TO PRODUCE
A short list of what to cancel, consolidate or move, with costs.
