GlobalTech is decommissioning an information system that has been in use for several years. As part of the disposal process, which of the following steps should be taken to ensure the security of any remaining sensitive data and compliance with regulatory requirements? (Select all that apply)