BlogManaged IT
Onboarding and offboarding staff securely
By David Otieno, Senior ICT Consultant 1 min read
Most access problems start when people join, move or leave. A checklist for each keeps accounts, devices and data under control.
Accounts that outlive the employee are a common security gap. So are new starters waiting days for access. Simple, repeatable checklists solve both.
Onboarding
- Create accounts based on role, with only the access the role needs.
- Prepare a configured device with security software and encryption.
- Set up multi-factor authentication on day one.
- Provide a short induction on security basics and how to get help.
Role changes
When someone moves roles, remove access they no longer need as well as adding new access. Otherwise permissions accumulate over the years.
Offboarding
- Disable accounts on the last day — or immediately for unplanned departures.
- Revoke remote access, VPN and shared credentials they knew.
- Recover devices, keys and access cards.
- Transfer ownership of files and mailboxes that the organisation needs.
- Reassign software licences.
Make HR and IT talk
The process only works if IT is told about starters, movers and leavers in time. Agree a simple notification route.
See our managed IT services.
About the author
David Otieno
Senior ICT Consultant
David Otieno writes about cybersecurity, physical security systems, power resilience and running IT reliably day to day.
