Offboarding checklist for terminated staff access

Overview

HR termination triggers fast IT lockout—delays equal insider risk.

Timing

Disable AD + cloud sessions before or simultaneous to HR meeting if coordinated.

Scope

VPN, RMM agent on personal BYOD if MDM enrolled, shared mailbox delegates, API keys named to employee, physical badge.

Verification

Automation report green checklist stored HR file restricted.

Rehire path

Document if ever allowed—fresh account not resurrect 5-year stale login.

Audits

Quarterly sample 10 terminations full trace in 24h SLA.

Privacy

Follow data retention on mailbox export legal hold exceptions.