OffboardID

Offboarding Employees and Contractors

Organizations should have a well-defined, repeatable process for offboarding departing employees and contractors. Yet often there is a haphazard, ad hoc approach to complete the necessary offboarding tasks, resulting in significant failures to protect the interests of the organization.

Most organizations do not realize IP or trade secret theft has occurred until long after the employee or contractor is gone. With the average corporation turning over 10% of their employees every year, the threat is constant and difficult to identify. Innovative Driven (ID) offers a complete offboarding package to identify and control the information risks associated with departing employees and contractors.

  • Policy Development, Revision, and Integration

    ID can provide a customized
    Offboarding Policy, that will assist
    stakeholders through the critical
    steps for a compliant process when
    personnel are terminated.

  • Analyz ID Report

    To protect organizations and their information assets, Innovative Driven has developed AnalyzID— the employee separation kit. AnalyzID provides quick and in-depth forensic analysis of employee computers and automatically flags suspicious activity.

    The analysis focuses on three main areas:

    • Evidence of Obfuscation
    • Evidence of Data Exfiltration
    • Evidence of Other Suspicious Activity
  • Exit Interview Script – Information Assets Section

    Based on the requirements of
    the organization, ID can create a
    customized Exit Interview Script
    section focusing on access to
    intellectual property and trade secrets,
    data extracted from the organization
    and retained by the departing
    employee or contractor.

  • Deleting Former Personnel Data

    Following a key data privacy
    principle— data minimization—
    the organization needs to identify
    personal data of former personnel
    and remove it from its systems,
    unless required for legal hold or audit
    requirements.

  • Data Sources Report

    ID’s off-boarding program focuses on
    how departing employees interacted
    with data and systems.

  • Learning the Indicators of Data Misuse

    Especially after an emergency termination, it is important to review the offboarding process
    and identify areas for improvement. ID brings the necessary experience to facilitate these
    discussions and assist with building a repeatable process with fewer issues. Stakeholders
    will participate in a formal session to learn to identify potential warning signs when there is
    misuse of data. A key input to this session is the forensics debrief. ID will make actionable
    recommendations to be incorporated into the organization.
    After reviewing the technical and process reports, ID will present a thorough business risk
    analysis of the offboarding process. While risks will not be eliminated, ID will work with the
    organization to develop risk mitigation strategies.

    If an organization suspects any personnel of misusing data or having excessive access to data,
    ID’s process can assist to identify indicators of inappropriate data handling. AnalyzID can be
    leveraged for reviewing any current personnel’s equipment that accesses data.

Standard Offboarding with AnalyzID

A typical offboarding scenario is a series of planned activities, mostly executed by HR. A sample process may appear as follows, with the integration of ID’s recommendations and AnalyzID:

  • Follow Offboarding Policy
  • Document Offboarding Decision
  • Finalized End Date
  • Determine Final Benefits & Payroll
  • Executive Offboarding Script
  • Remove Access
  • Implement Process Improvements
  • Prioritize Areas for Improvement
  • Review Aggregated Risk
  • Conduct After Action Review
  • Delete Personnel Data
  • AnalyID Forensic Analysis
  • Process Return of Assets

Unplanned Offboarding with AnalyzID

Occasionally, an organization may have to immediately terminate an employee or contractor. ID can again assist in that situation. An adapted process may be:

  • Follow Offboarding Policy
  • Document Offboarding Decision
  • Determine Final Benefits & Payroll
  • Remove Access
  • Obtain Equipment
  • Implement Process Improvements
  • Prioritize Areas for Improvement
  • Review Aggregated Risk
  • Conduct After Action Review
  • Delete Personnel Data
  • AnalyID Forensic Analysis