"You go now! No trouble!" Understanding the Offboarding Process in Companies from an...
summary
Analysis of ISO, NIST and BSI guidance and 15 in-depth interviews (13 German, 2 English) finds no actionable standard and wide practice variance: teams reliably perform retrieving assets, revoking access rights and notifying stakeholders, but features like automated logging or exit interviews appear in only a few orgs. Role/permission mismanagement and poor communication cause breaches (examples include a healthcare leak of 1.2M records and an app exposing ~8M users), resource and usability gaps persist, and the authors present a consolidated offboarding actions list to bridge standards and practice.
AI-written summary · about
chapters (8)
- 0:00Offboarding introduction
- 1:34Offboarding meaning
- 2:40Research methodology
- 4:26IT security frameworks
- 5:30Current offboarding processes
- 6:56Offboarding challenges and risks
- 9:24No universal offboarding process
- 10:29Key takeaways
related talks
05mThe practical steps an organisation needs to take and the interface...
05mThe practical steps an organisation needs to take and the
36mPrivacy, Consent and Security Within Modern Applications
05mIndustry Responses to the European Directive on Security of Network and Information
11mExploring the Security Culture of Operational Technology (OT) Organisations...
23mAccess is the New Breach: Observability Must Start with Identity
36mBreaking the Mold
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus