IT Checklists & Resources
Employee Offboarding IT Security Checklist
Step-by-step checklist to revoke account access, secure company data, and retrieve company devices.
When an employee leaves your organization, securing active login credentials and retrieving data promptly is critical to prevent leaks or system lockouts.
1. Immediate Action: Access Revocation
Reset primary password
Log into the admin portal and change the user's password to lock them out of existing active browser sessions.
Revoke active login tokens
Enforce cloud lockout to instantly sign the user out of mobile apps and desktop clients.
Disable active logins
Block sign-in permissions on Microsoft 365, Google Workspace, and VPN portals.
2. Email & File Forwarding Controls
Audit automated forwarding rules
Check for hidden mail rules forwarding incoming messages to a personal address.
Convert mailbox to shared archive
Convert the user's inbox to a shared resource; grant access to their manager; cancel their active paid license.
Transfer file and document ownership
Re-assign private OneDrive or SharePoint files to active staff members.
3. Device Retrieval & Securing
Collect physical devices
Retrieve laptops, phones, security keys, and building access cards.
Wipe or reset devices remotely
Use MDM consoles to factory reset retrieved company hardware before deploying to new staff.
Tip: You can use your browser's Print function (Cmd+P or Ctrl+P) to save or print this page as a clean PDF checklist.
Need professional help implementing this setup?
We help local Alaska businesses configure, lock down, and audit their entire IT setups. Connect with us today.