What this diagnostic measures
These ten questions track the controls that fail when employee departures go wrong: unrecovered devices that remain live endpoints, credentials that outlive the employment relationship, components that walk, and offboarding processes that produce no evidence they were followed. The questions map one-to-one to the control gaps described in our analysis of the Apple v. OpenAI trade secret filing — allegations in that case, but everyday failure modes everywhere.
A high score means your exits produce a record: per-serial recovery reconciliation, revocation timestamps, monitoring notes, and certificates for anything retired. A low score tells you which artifact to build first — and the Vault's Offboarding IT Asset & Access Checklist is the working document for most of them. If a departed employee’s device never came back, treat it as an incident: the Lost Device Triage covers the first hour and the notification clocks.