-
Follow Offboarding Policy
-
Document Offboarding Decision
-
Finalized End Date
-
Determine Final Benefits & Payroll
-
Executive Offboarding Script
-
Remove Access
-
Implement Process Improvements
-
Prioritize Areas for Improvement
-
Review Aggregated Risk
-
Conduct After Action Review
-
Delete Personnel Data
-
AnalyID Forensic Analysis
-
Process Return of Assets
Offboarding Employees and Contractors
Organizations should have a well-defined, repeatable process for offboarding departing employees and contractors. Yet often there is a haphazard, ad hoc approach to complete the necessary offboarding tasks, resulting in significant failures to protect the interests of the organization.
Most organizations do not realize IP or trade secret theft has occurred until long after the employee or contractor is gone. With the average corporation turning over 10% of their employees every year, the threat is constant and difficult to identify. Innovative Driven (ID) offers a complete offboarding package to identify and control the information risks associated with departing employees and contractors.
-
Policy Development, Revision, and Integration
ID can provide a customized
Offboarding Policy, that will assist
stakeholders through the critical
steps for a compliant process when
personnel are terminated. -
Analyz ID Report
To protect organizations and their information assets, Innovative Driven has developed AnalyzID— the employee separation kit. AnalyzID provides quick and in-depth forensic analysis of employee computers and automatically flags suspicious activity.
The analysis focuses on three main areas:
- Evidence of Obfuscation
- Evidence of Data Exfiltration
- Evidence of Other Suspicious Activity
-
Exit Interview Script – Information Assets Section
Based on the requirements of
the organization, ID can create a
customized Exit Interview Script
section focusing on access to
intellectual property and trade secrets,
data extracted from the organization
and retained by the departing
employee or contractor. -
Deleting Former Personnel Data
Following a key data privacy
principle— data minimization—
the organization needs to identify
personal data of former personnel
and remove it from its systems,
unless required for legal hold or audit
requirements. -
Data Sources Report
ID’s off-boarding program focuses on
how departing employees interacted
with data and systems. -
Learning the Indicators of Data Misuse
Especially after an emergency termination, it is important to review the offboarding process
and identify areas for improvement. ID brings the necessary experience to facilitate these
discussions and assist with building a repeatable process with fewer issues. Stakeholders
will participate in a formal session to learn to identify potential warning signs when there is
misuse of data. A key input to this session is the forensics debrief. ID will make actionable
recommendations to be incorporated into the organization.
After reviewing the technical and process reports, ID will present a thorough business risk
analysis of the offboarding process. While risks will not be eliminated, ID will work with the
organization to develop risk mitigation strategies.If an organization suspects any personnel of misusing data or having excessive access to data,
ID’s process can assist to identify indicators of inappropriate data handling. AnalyzID can be
leveraged for reviewing any current personnel’s equipment that accesses data.
Standard Offboarding with AnalyzID
A typical offboarding scenario is a series of planned activities, mostly executed by HR. A sample process may appear as follows, with the integration of ID’s recommendations and AnalyzID:
Unplanned Offboarding with AnalyzID
Occasionally, an organization may have to immediately terminate an employee or contractor. ID can again assist in that situation. An adapted process may be:
-
Follow Offboarding Policy
-
Document Offboarding Decision
-
Determine Final Benefits & Payroll
-
Remove Access
-
Obtain Equipment
-
Implement Process Improvements
-
Prioritize Areas for Improvement
-
Review Aggregated Risk
-
Conduct After Action Review
-
Delete Personnel Data
-
AnalyID Forensic Analysis