If you are a business owner or organization manager, you likely have seen people come and go. New people are hired and others leave – or maybe are let go.
When a new person is hired, one of the first things you do is ensure they have an email account and that they have access to the network and any programs that they need to do their job.
However, when people leave, we often find that organizations are not as diligent in ensuring these accesses are removed. Or that they are removed quickly. Especially if it was not a pleasant departure.
Just as you likely have a procedure whereby you set up these accounts/accesses, you should also have a policy that states inactive email addresses are disabled and any other account credentials are removed. Additionally, any common passwords or PINs for entering the facility should be changed.