InsightsOperations and lifecycle

When an employee leaves: How to keep access from lingering

Forgotten accounts are one of the most common security risks in smaller businesses. With a standard routine, they are easy to avoid.

Why it happens

When someone leaves, there is a lot to take care of: the handover, the exit interview, and equipment to return. The accounts in Microsoft 365, line-of-business systems, and cloud services are easy to overlook – and can stay active for months.

The risk

An active account for a former employee is an open door. The password may have been leaked, the account can be misused, and no one notices because no one uses it anymore. On top of that, your business is paying for a license for an account no one needs.

A routine that works

The best solution is a standard checklist that starts the same day the resignation is recorded. The account is disabled on the employee's last day, email is forwarded or the mailbox is converted to a shared mailbox, files are transferred to a colleague, and devices are reset and collected.

What we recommend

  • Create a standard employee offboarding checklist
  • Disable the account no later than the employee's last day
  • Transfer files and email to a designated colleague
  • Review inactive accounts every month

How we can help

Wondering what this means for your organization? Let's talk.

Request a meeting →

Read next

All articles →

Need an IT provider that understands your business?

Tell us a little about your business and what you need help with, and we'll reach out to schedule a no-obligation conversation.

Or call +47 977 99 889, or email post@iqonic.no.

post@iqonic.no