Off-Boarding
What is Off-Boarding?
The process of securely revoking all access, retrieving assets, and completing security procedures when an employee or contractor leaves the organization.
Frameworks that govern off-boarding
What the standards actually require on off-boarding
Requirements naming off-boarding across 5 standards, quoted from the control text.
A responsible entity must establish and maintain a process or system in its CIRMP to identify its critical workers, to permit a critical worker access to critical components only where assessed as suitable for that access, and as far as reasonably practicable...
critical-infrastructure-risk-management-program-cirmp-rules-2023::9(1) · s 9(1) Personnel hazards: identify critical workers, permit access only on suitability, address malicious, negligent and off-boarding risks →Management has termination and off-boarding procedures that identify who decides to terminate a vendor relationship with approval and acknowledgment by the contracted parties, negotiates termination clauses covering fourth and nth parties and the confidentiali...
ffiec-it-examination-handbook::DAM-VII.D · VII.D Termination and Disposal (Development, Acquisition, and Maintenance) →Guidance that HCR also supports managing human capital risk: each reporting area should carry a narrative 'active risk management' section summing up its main risks and opportunities (ISO 31000 and ISO 9001 give further guidance).
iso-30414-2018-human-resource-management-guidelines-for-internal-and-external-human-capital-reporting::4.6 · Risk management →Procedures must be in place to remove agency-installed software and all agency data from a device when the user no longer needs BYOD, is redeployed, or leaves employment (off-boarding).
new-zealand-information-security-manual-nzism::21.4.10.C.06 · 21.4.10.C.06 Offboarding removal of agency software and data →The program must identify the entity's critical workers; allow a critical worker access to critical components only after being assessed suitable;
telecommunications-sector-security-reforms-tssr::TSRMP-12 · TSRMP Rules s 12: personnel hazards →Questions people ask about off-boarding
What is Off-Boarding?
Why is Off-Boarding important for compliance?
Which compliance frameworks address Off-Boarding?
Where can I learn more about Off-Boarding?
See how Off-Boarding applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.