Halloween access check · free checklist
They're called former employees who still have access.
If your IT company can't tell you who still has keys, that's the scary part.
BUILT BY LOCAL ENGINEERS IN ECHO PARK, LOS ANGELES · SINCE 1999
the checklist
Bring these to your next check-in. A good IT partner answers them quickly, in writing, and without jargon. If an answer is unclear, ask who will verify it, and by when. Mark each one as you go.
A good answer: the same day, from a written offboarding checklist, and they can show you the last time it happened.
A good answer: a current list of every account, matched against your actual staff, with no names you don't recognize.
A good answer: they check for outside forwarding regularly, block it by default, and get alerted when someone sets it up.
A good answer: sign-in approval devices are removed the day someone leaves, and lost or replaced phones are cleared too.
A good answer: a report of who can see client folders, plus a habit of expiring outside sharing links.
A good answer: billing, e-signature, practice management, and bank portals are on the offboarding list, not just email.
A good answer: a short, named list of admin accounts, none of them shared or tied to someone who no longer works with you.
A good answer: they can remotely wipe firm data from any device, including personal phones, when someone leaves.
A good answer: suspicious sign-ins trigger an alert that a real person reviews, day or night.
A good answer: within the last quarter, documented in writing, ready to hand to your insurer or a client's security questionnaire.
Bring your checklist to a free 30-minute conversation with a nicwerks® engineer. We'll review your answers, identify what needs checking, and outline practical next steps.
30 MINUTES · NO PRESSURE · PLAIN-ENGLISH GUIDANCE
