Offboard a leaver from a software company

Every login removed, every key rotated, and the evidence kept for your SOC 2 audit.

1. Confirm the last day
2. Turn off single sign on on the last day
3. Remove access to tools outside single sign on. Most people forget this: Tools outside single sign on are the ones auditors find still open
4. Rotate any shared keys or passwords they knew
5. Get the laptop back and wipe it
6. Save the offboarding ticket as audit evidence
7. Confirm all access is removed (IT lead signs off)

All recipes