Ten yes/no questions about what happens to devices, data, and access when someone leaves your organization. Answer honestly — the score is for you, and nothing here is recorded or sent anywhere.
1. A written offboarding checklist exists that covers IT assets and access — not just HR steps.
2. Every issued device is serialized in an asset register at the moment it's issued.
3. At departure, recovered devices are verified per serial against the register — recovery is proven, not assumed.
4. An unreturned device triggers same-day escalation: MDM lock/wipe, an incident, and recovery pursued in writing.
5. Account and network access is revoked effective the separation date — independent of equipment return.
6. Shared credentials and admin keys the departing employee knew are rotated at departure.
8. Sensitive components — prototypes, pulled drives, engineering samples — carry custody controls of their own.
9. Security procedure documents — including the offboarding checklist itself — are classified and access-restricted.
10. Recovered devices end their life with evidence: NIST 800-88 sanitization or certified destruction, per serial.
What this diagnostic measures
These ten questions track the controls that fail when employee departures go wrong: unrecovered devices that remain live endpoints, credentials that outlive the employment relationship, components that walk, and offboarding processes that produce no evidence they were followed. The questions map one-to-one to the control gaps described in our analysis of the Apple v. OpenAI trade secret filing — allegations in that case, but everyday failure modes everywhere.
A high score means your exits produce a record: per-serial recovery reconciliation, revocation timestamps, monitoring notes, and certificates for anything retired. A low score tells you which artifact to build first — and the Vault's Offboarding IT Asset & Access Checklist is the working document for most of them.
CYBERCRUNCH · NAID AAA · R2v3 · RIOS · PA DEP
Whatever your score, here's the working tool.
The Employee Offboarding IT Asset & Access Checklist covers all six phases — notice, separation day, recovery, transfer, disposition, closeout — with sign-offs and an evidence trail. Free in the Vault.
