Revoke access by dependency, not visibility
Returned keys and devices are only the visible part. Ownership, recovery, forwarding, integrations, and shared secrets can survive a departure.
Physical access
Recover keys, cards, devices, passes, storage access, and any alarm or site credential tied to the role.
Digital identity
Disable individual accounts, close sessions, remove delegated access, and rotate secrets that were truly shared.
Operational ownership
Transfer domains, social accounts, supplier profiles, scheduled work, records, and recovery methods before cutoff.
Build the access inventory around systems and assets, not memory. Include keys, cards, codes, devices, email, shared storage, remote access, administrator roles, vendor portals, domains, social accounts, payment profiles, forwarding, integrations, and emergency credentials. Name a current business owner for each item before the departure time.
Coordinate retention, transfer, revocation, and communication. Business records may need preservation while personal material should not be copied without a valid reason. Rotate truly shared secrets, but do not create unnecessary disruption by resetting unrelated access. After the change, review logs and ownership and tell coworkers or vendors only what they need to continue safely.
- Set one agreed time for physical and digital changes.
- Transfer ownership before disabling the departing account.
- Verify forwarding, integrations, and backup access afterward.
Access inventory example
A departing manager returns a key and laptop, but still owns the business social account, website domain login, and supplier payment profile. The inventory reveals these less-visible dependencies before the account is disabled and allows ownership to be transferred deliberately.
Why physical and digital access need one inventory
- Changing the front-door code while leaving email forwarding or a shared cloud login active is incomplete.
- A routine, respectful process is safer than treating every departure as evidence of wrongdoing.
- Emergency offboarding needs a pre-authorized decision path so staff do not debate ownership during an incident.
Evidence basis: The cited sources support the checks above. They do not replace current provider, property, workplace, authority, or local requirements. CISA: Secure Our World.
Access and offboarding security checklist
Run one coordinated inventory at the agreed time. Keep employment details private while confirming each operational owner.
Employment, privacy, and records limits
Coordinate offboarding with applicable employment, privacy, record-retention, and contractual duties. Communicate operational changes without publishing private reasons for a person's departure.