IT Employee Exit and Transition Policy

• Table of Contents

  • EDC Inc IT Employee Exit and Transition Policy
  • 1.0 Purpose
  • 2.0 Scope
  • 3.0 Policy
  • 3.1 Notification
  • 3.2 Access Rights
  • 3.3 Return of Company Property
  • 3.4 Transfer of Job Responsibilities
  • 3.5 Server Patching
  • 3.6 Inventory Management
  • 3.7 Change Audit
  • 4.0 Enforcement
  • 5.0 Policy Review
  • Summary

EDC Inc IT Employee Exit and Transition Policy

This policy outlines the procedures and responsibilities of EDC Inc and its employees during the transition period when an IT employee leaves the company. The policy aims to ensure the security and integrity of EDC Inc’s information systems and assets.

1.0 Purpose

The purpose of this policy is to establish a standard procedure for handling the exit of IT employees in a manner that protects the security and integrity of EDC Inc’s information systems and assets. This includes the deactivation of access rights, return of company property, and transfer of job responsibilities.

2.0 Scope

This policy applies to all IT employees who are leaving EDC Inc, whether through resignation, termination, retirement, or other forms of departure.

3.0 Policy

3.1 Notification

Upon receipt of an employee’s notice of departure, the respective IT Director or Manager should immediately notify the IT-SOC (Incident Management) and IT Security Operations.

3.2 Access Rights

All user and service accounts of the departing employee in Active Directory will be deactivated on the employee’s last working day. This task will be performed by IT Server Operations in coordination with IT Security Operations.

3.3 Return of Company Property

The departing employee is required to return all company property, including but not limited to, access cards, keys, equipment, and devices. The Corporate Physical Security department will oversee this process.

3.4 Transfer of Job Responsibilities

The departing employee’s job responsibilities will be transferred to another employee or team. The respective IT Director or Manager will oversee this process, ensuring that all necessary training and documentation are provided.

3.5 Server Patching

IT Server Operations will ensure that all servers managed by the departing employee are patched within 30 days of the employee’s departure, unless an “IT Exception” is approved by IT Security.

3.6 Inventory Management

The IT Server Build Operations will update the CMDB to reflect any changes in the inventory due to the employee’s departure.

3.7 Change Audit

Any changes made to the systems or assets due to the employee’s departure will be audited by the CAB (Change Audit Board) and IT Audit and Compliance.

4.0 Enforcement

Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.

5.0 Policy Review

This policy will be reviewed at least once a year by IT Security Operations and IT Audit and Compliance to ensure its effectiveness and compliance with current regulations and best practices.

Summary

The EDC Inc IT Employee Exit and Transition Policy is designed to protect the company’s information systems and assets during the transition period when an IT employee leaves the company. The policy outlines the procedures for deactivating access rights, returning company property, transferring job responsibilities, server patching, inventory management, and change auditing. It is the responsibility of all employees to adhere to this policy, and any violations may result in disciplinary action.