Remove security questions deemed unnecessary 

Removes the following questions from the pages, and the need to store or validate them.

**Equipment disposal**
- Secure component disposal
  - How are any components containing sensitive data sanitised, removed or destroyed?

**Incident management**
- Format of security incident notifications published
  - Do you publish the content and format of security incident notifications?

**Incident management**
- Maxiumum timescale for incident investigation
  - What are your maximum timescales by which an incident will be investigated?

**External interface protection**
- Data access control
  - Do you provide access control of the data, to the service for consumers?

**External interface protection**
- Authentication and authorisation
  - Do you provide authentication and authorisation to the service for all functions?