People leave. Their accounts often stay.

What actually happens

Their account may still work. So may the shared passwords they knew, the apps they signed up for with their work email, and the phone still syncing company mail.

An unused account is an ideal target: nobody notices odd sign-ins, and nobody reads the mailbox. Shared passwords are harder still, because changing one means telling everyone who uses it.

Every departure needs the same steps: sign-in blocked the same day, devices and sessions signed out, mail and files handed to a manager, shared passwords changed and licenses reclaimed.

What you can do today

• List everyone with an active account and compare it with who works for you today.
• Move shared passwords into a password manager, so they can be changed in one place.
• Write down the steps for the next departure before you need them.