Offboarding
In one sentence
The checklist of steps to cut off a departing employee's access to systems, data, and devices.
Offboarding is the documented process run when someone leaves: email disabled, sessions revoked, SaaS accounts removed, devices collected, shared passwords rotated. Done same-day and on a checklist, it closes a common and cheap-to-fix gap.
Why it's on your cyber insurance application
A named application question; 'same day, on a checklist' is what underwriters want to hear.
What this looks like in practice
Keep a checklist and run it the same day. Disable the email account rather than deleting it, revoke the active sessions (a disabled account can stay signed in otherwise), remove them from the apps outside your main system, collect the laptop, and rotate any shared password they knew. Date each one. That dated list is what you show when a carrier asks.
How the Readiness Check scores it
The free Check asks the same question a carrier will. Here it is, why it's asked, and the fix if today's honest answer is no. The full application question list has the rest.
Access control & offboarding
When someone leaves the company, how quickly is their access removed?
Why carriers ask: Orphaned accounts from departed employees are a classic breach entry point. Carriers ask whether access removal is immediate and documented.
If the answer is no: List every system a departing employee touches; turn it into a checklist; assign an owner. Two hours, permanent fix.
The written evidence carriers accept
A “yes” on the application needs a document behind it. In the Readiness Pack, that document is:
Related terms
Would you pass this question today?
The free Readiness Check scores you across the ten control domains carriers probe, in five minutes, no email required for the score.