1
00:00:00,002 --> 00:00:02,006
- [Narrator] Every
employee eventually leaves

2
00:00:02,006 --> 00:00:05,006
an organization for one reason or another.

3
00:00:05,006 --> 00:00:07,007
In the happiest case, they're retiring

4
00:00:07,007 --> 00:00:10,004
after years of successful employment.

5
00:00:10,004 --> 00:00:12,006
In other cases, they're
voluntarily leaving

6
00:00:12,006 --> 00:00:15,007
because they found a more
attractive position elsewhere.

7
00:00:15,007 --> 00:00:17,009
Sometimes, however, the termination

8
00:00:17,009 --> 00:00:19,008
is on less positive grounds,

9
00:00:19,008 --> 00:00:22,007
and the employee is being
forced out of the organization

10
00:00:22,007 --> 00:00:25,000
through layoffs or firing.

11
00:00:25,000 --> 00:00:27,006
No matter the reason, it's very important

12
00:00:27,006 --> 00:00:29,006
that security teams play a role

13
00:00:29,006 --> 00:00:32,006
in the employee termination process.

14
00:00:32,006 --> 00:00:34,008
Organizations should
do everything they can

15
00:00:34,008 --> 00:00:38,002
to make an employee's separation
as pleasant as possible

16
00:00:38,002 --> 00:00:40,000
given the circumstances.

17
00:00:40,000 --> 00:00:43,002
One way to do this is
through an exit interview,

18
00:00:43,002 --> 00:00:45,006
usually conducted by a senior manager

19
00:00:45,006 --> 00:00:48,003
or a member of the human
resources department.

20
00:00:48,003 --> 00:00:50,007
Exit interviewers are
used to gather information

21
00:00:50,007 --> 00:00:53,004
about the employee's
experience at the company

22
00:00:53,004 --> 00:00:56,003
and wish them well in
their future endeavors.

23
00:00:56,003 --> 00:00:58,008
Exit interviewers are also a useful time

24
00:00:58,008 --> 00:01:00,005
to gently remind the employee

25
00:01:00,005 --> 00:01:02,004
about his or her responsibilities

26
00:01:02,004 --> 00:01:04,007
under their non-disclosure agreement,

27
00:01:04,007 --> 00:01:06,005
and that the employee must continue

28
00:01:06,005 --> 00:01:08,004
to protect confidential information

29
00:01:08,004 --> 00:01:11,001
even after leaving the organization.

30
00:01:11,001 --> 00:01:13,003
It's a little bit tricky to do this well

31
00:01:13,003 --> 00:01:15,006
because you don't want
to offend the employee,

32
00:01:15,006 --> 00:01:18,005
but you do want to offer a reminder.

33
00:01:18,005 --> 00:01:21,005
One good way is to do this
is by saying something like,

34
00:01:21,005 --> 00:01:24,005
"And, as you know, your
non-disclosure agreement

35
00:01:24,005 --> 00:01:27,004
"will remain in place
even after you leave us.

36
00:01:27,004 --> 00:01:28,009
"If you ever have any questions

37
00:01:28,009 --> 00:01:31,009
"about the types of information
covered by that agreement,

38
00:01:31,009 --> 00:01:33,008
"please feel free to give us a call.

39
00:01:33,008 --> 00:01:36,001
"We'd be happy to help you sort it out."

40
00:01:36,001 --> 00:01:38,008
Organizations should also
carefully think through

41
00:01:38,008 --> 00:01:42,004
when they revoke access to
information and systems.

42
00:01:42,004 --> 00:01:44,008
In the case of a voluntarily separation,

43
00:01:44,008 --> 00:01:46,004
this is usually easy,

44
00:01:46,004 --> 00:01:48,002
and the employee's access is revoked

45
00:01:48,002 --> 00:01:51,004
at the end of his or her
last day of employment.

46
00:01:51,004 --> 00:01:54,000
In the case of an involuntary separation,

47
00:01:54,000 --> 00:01:56,000
things can get a little trickier.

48
00:01:56,000 --> 00:01:58,009
If the employee is being
terminated immediately,

49
00:01:58,009 --> 00:02:02,002
the likelihood of a revenge
attack becomes higher.

50
00:02:02,002 --> 00:02:05,005
In those cases, organizations
should cut off access

51
00:02:05,005 --> 00:02:08,006
at the same time as the
employee is being notified

52
00:02:08,006 --> 00:02:10,005
of his or her termination.

53
00:02:10,005 --> 00:02:12,006
If you cut off access too early,

54
00:02:12,006 --> 00:02:15,009
you run the risk of alerting
the employee to the firing.

55
00:02:15,009 --> 00:02:18,008
If you do it too late, the
employee may gain access

56
00:02:18,008 --> 00:02:21,009
to systems after the termination meeting.

57
00:02:21,009 --> 00:02:24,002
Finally, don't forget to retrieve

58
00:02:24,002 --> 00:02:26,000
all of the organization's property

59
00:02:26,000 --> 00:02:28,001
that's in the employee's possession.

60
00:02:28,001 --> 00:02:31,006
This includes keys, access badges,

61
00:02:31,006 --> 00:02:36,000
laptops and mobile devices,
and paper and electronic files.

62
00:02:36,000 --> 00:02:37,004
If you don't retrieve assets

63
00:02:37,004 --> 00:02:39,002
on the last day of employment,

64
00:02:39,002 --> 00:02:42,001
your likelihood of ever
retrieving them is low.