Offboarding

The process that is followed when an organization ends a partnership with an employee.

This includes tasks like collecting keys, disabling accounts, and collecting assets that belong to the company (even if they were assigned to the leaving employee) like a laptop or work phone.

When an employee resigns, retires, or is otherwise terminated, make sure to follow your organizations end-user termination checklist. If it isn't completed properly, it can leave breaches in security waiting to be exploited.

• Disable all the user's accounts
  • network accounts
  • email
  • software
  • VPN access
  • Don't delete the account so that you can backup it's data that could be valuable to the company
  • Terminate access to their email account
    • Forward all emails and phone call transcripts/recordings to the employee's supervisor
• Collect physical access items:
  • Collect access tokens
  • Collect mobile devices
  • Change shared passwords & access codes used by the former employee
• Gather company owned assets
  • Laptop
  • Phone
  • Uniform

See it's sibling, onboarding.

#II