A former employee still has access to everything
Common situation · Security & AccessA situation we are often asked to help with. Many owners live with it for years because it feels like part of running a business. If it sounds like yours, here is what is usually behind it and how we fix it.
What you might be noticing
- •Nobody can say who has access to which system.
- •Passwords have been shared around and never changed.
- •When someone leaves, removing their access depends on whoever remembers.
What is usually going on underneath
Access was handed out as people needed it, and nobody owns the list. Without roles and a routine for leavers, access builds up and is never taken back.
How we fix it
1
List who has access to what
We document every system, who can get in, and how.
2
Set access by role
People see and change what their job needs, and no more.
3
Build a routine for leavers
Removing access becomes a step in the process for someone leaving, so it doesn’t depend on memory.