Zansa › Answers › Privacy, security and ownership
What should I do when an employee or contractor with data access leaves?
Remove their access on or before their last day, covering email, cloud accounts, databases, dashboards and shared drives. Rotate any shared credentials or keys they knew, retrieve devices, and review logs for unusual activity. Prompt removal is one of the cheapest security measures available.
Keep a current list of who has access to what, so nothing is missed. Include outside providers and contractors, whose access often outlasts the project.
Remind leavers in writing of continuing confidentiality duties. Individual accounts, rather than shared ones, make this far easier, since you remove one account without disrupting others. Rules differ by country and sector, so check how this applies to you with a qualified adviser.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call