Employee Offboarding Security Checklist
Prompt, respectful offboarding protects company data and the departing worker by closing access, transferring ownership, and returning equipment clearly.
Who this guide is for
Small businesses handling employee or contractor departures.
Practical checklist
- Inventory the person’s accounts, devices, keys, badges, shared secrets, and third-party services.
- Transfer ownership of files, mailboxes, domains, automations, code, and customer records before disabling access.
- Revoke sessions, multi-factor methods, VPN access, tokens, shared passwords, and recovery contacts.
- Collect and securely reset or wipe company equipment according to policy.
- Document completion, preserve required business records, and notify relevant internal owners.
Common mistake to avoid
Disabling only the email account while shared links, remote access, API tokens, and vendor accounts remain active.
A safer way to proceed
Use a role-based checklist coordinated across management, IT, payroll, and data owners.
Product features, prices, eligibility, and policies can change. Confirm important details on the provider’s official website before purchasing, renewing, changing account settings, or acting on a security alert. If an incident may involve financial loss, sensitive personal data, or a business network, consider qualified professional help and the appropriate official reporting channel.