SPF, DKIM and DMARC: stop attackers from sending email in your company's name
Fake invoices and "urgent" messages from the director are among the most common attacks. Three DNS records make them much harder.
Read articleWhen someone leaves the company, HR handles the documents — but access to systems often stays. Active email, VPN, cloud and accounting accounts of former employees are a real risk: from data leaks to attackers using a forgotten account nobody watches.
On the last day
- Disable the user's domain / Microsoft 365 / Google account and VPN access.
- Revoke access to 1C, CRM, banking, cloud services and social media pages.
- Change shared passwords the person knew (Wi-Fi, service accounts, router, alarm system).
- Collect the laptop, phone, access cards, keys and security tokens.
- Remove the person's devices from MFA and mobile device management.
Keep the data
- Forward or delegate the mailbox to the manager for an agreed period instead of deleting it.
- Transfer ownership of files and shared documents.
- Keep a backup of the user's data according to your retention policy.
Make it routine
Agree with HR that IT is informed in advance, and keep a written checklist. A good starting point is the list of accounts created during onboarding — everything created then must be closed now.
Access ends on the same day as the contract — not when someone remembers.
Need help with this? Contact CySec for a free consultation.