An IT administrator is tasked with handling the offboarding process for an employee who has just been terminated. To minimize security risks, which of the following actions should be the administrator's IMMEDIATE priority?
Notify the rest of the team about the employee's departure.
Retrieve all company-owned physical assets from the employee.
Disable the employee's user accounts across all systems.
Begin archiving the data from the employee's workstation.
The correct answer is to disable the employee's user accounts across all systems. This is the most critical first step in the de-provisioning process to immediately revoke access and prevent any potential unauthorized actions by the former employee. While retrieving company assets, archiving data, and notifying the team are all important parts of the offboarding checklist, none are as time-sensitive as cutting off system access to protect company data and resources.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does 'de-provisioning' mean in the context of user accounts?
Open an interactive chat with Bash
What are the risks associated with not de-provisioning user accounts immediately after termination?
Open an interactive chat with Bash
What best practices should organizations follow for user account de-provisioning?