When someone leaves your business in Vero Beach or elsewhere on the Treasure Coast, you need more than their laptop and office keys back. Their access may extend to email, customer records, accounting software, vendor portals, shared passwords, and files stored on personal devices.
An IT employee offboarding checklist helps you end that access while keeping the records and responsibilities your business still needs. You should follow it for every departure, including a retirement or an employee leaving on good terms. An unused account or a missing handoff can cause problems without anyone intending harm.
Can former employees still be insider threats?
A former employee can remain an insider threat if they retain access to business accounts, shared credentials, or sensitive information. They may know your systems and processes even after their job ends. That does not mean every former employee intends harm; unused access can also be misused by someone else or lead to accidental changes. Your IT offboarding checklist should remove access based on the departure, rather than waiting for suspicious behavior.
Tell your IT provider before the departure takes effect
Your IT provider cannot coordinate access changes around a departure it does not know about. Give your provider an authorized request with the employee’s name, the exact date and time access should end, and a management contact who can approve decisions.
For a planned departure, prepare the handoff in advance. For an immediate termination, coordinate the access changes with the employee notification and equipment collection. Keep the information limited to the people who need it.
Also identify who will handle the employee’s work, which records need to be preserved, and whether HR or legal has issued preservation instructions. Removing access and deciding what to keep are related tasks, but they do not have to mean deleting everything at the same time.
Look beyond the employee’s main login
Use your account inventory to identify every system the employee could access. Ask their manager about applications or vendor accounts that may have been created outside your normal IT process.
- Email and collaboration: Microsoft 365, shared mailboxes, Teams, and file-sharing services.
- Business applications: Accounting, payroll, customer management, and industry-specific software.
- Remote access: VPN connections, remote desktop tools, and outside support accounts.
- Business ownership: Website hosting, domain registration, social media, and vendor portals.
- Other access: Password managers, administrator accounts, building badges, and keys.
For example, disabling someone’s Microsoft 365 account may leave a separate accounting login active. A vendor portal registered to their personal email address may also need an ownership change rather than a simple password reset.
Include contractors and temporary staff in the same process when their work ends. When an employee changes roles, review and remove access they no longer need.
End access, including existing sessions
Your IT provider should disable the appropriate accounts and address existing signed-in sessions. Changing a password alone is not a reliable way to end every session across every application.
Some applications maintain their own sessions or require separate account removal. The time needed for access changes to take effect can also vary. Your provider should understand those differences and verify the important systems instead of assuming one change instantly closes everything.
If the employee knew shared passwords, arrange to change them and review any shared authentication or recovery methods. For technical credentials used by software or equipment, plan the changes carefully so you do not interrupt a business process.
Where possible, give employees individual accounts with appropriate permissions. That makes it easier to remove one person’s access without disrupting everyone else or losing the record of who performed an action.
Preserve the records your business needs
Before deleting accounts or removing licenses, decide how you will retain necessary email, files, and other business records. Account deletion and licensing changes can affect availability and retention, so your provider should check the current requirements for each service.
Microsoft’s former-employee guidance treats access removal and data preservation as parts of the same process. For your business, the goal is to end the employee’s access while giving authorized staff a controlled way to continue the work.
Choose who needs access and for how long. Do not give everyone unrestricted access to a former employee’s mailbox. If messages need to be redirected or an automatic reply is needed, approve the destination and wording.
Move active business files into the appropriate team storage and transfer ownership of documents, recurring tasks, and business accounts. Have your legal advisor address retention or preservation obligations where needed; a routine cleanup should not destroy records subject to a legal hold.
Recover devices and account for local copies
Use your equipment records to collect company laptops, phones, security keys, storage devices, and other issued items. Record what came back and what is still missing.
Blocking online access does not erase files already downloaded to a device. Remote removal also depends on your management tools, device configuration, and connectivity. An offline device may retain local data.
If personal devices were allowed, follow your established policy and use supported controls to remove business access or managed business data. Do not assume your provider can erase company files from every personal device.
Before wiping or reassigning equipment, confirm that needed records have been preserved and that no investigation requires the device to remain intact.
Verify the work and close the checklist
Keep a record of the systems reviewed, the actions taken, who completed them, and any unresolved items. Name an owner and follow-up date for missing equipment, vendor changes, or access that requires another party’s help.
If you discover suspicious activity, involve your IT provider promptly and preserve relevant logs and evidence. Your offboarding checklist should connect to your incident response process rather than treating a possible security event as ordinary account cleanup.
Make offboarding part of your ongoing IT management
Good offboarding starts before someone leaves. An accurate account inventory, documented equipment assignments, individual logins, and business-controlled recovery details make the departure easier to handle.
At Unified Technology Solutions, employee account changes fit into our clients’ ongoing managed IT services. Your management team authorizes the timing and business decisions; we handle the technical work within the systems we manage and help coordinate the remaining steps.
That includes connecting Microsoft 365 management with your broader cybersecurity practices. If you are looking for an IT provider to manage your business systems and keep employee access changes organized, contact UTS to discuss your needs.