Protection Habit of the Week
Close access when people leave
Use one checklist to remove a departing employee's or contractor's access on the agreed end date.
Unused accounts and retained credentials create avoidable access paths to business information.
- List systems, shared files, keys, and devices.
- Assign an access-removal owner.
- Confirm completion and retain the checklist.
Reviewed 7/24/2026 by Christopher Green. Official guidance: NIST Small Business Cybersecurity Corner ↗