Templates / IT operations
Employee IT Offboarding Checklist
Offboarding is where security debt accumulates quietly. This runs access revocation, data preservation and asset recovery in an order that leaves an audit trail.
Download the template Create a free account12 checklist items · 3 sections · free, no sign-up to download
What’s inside
Built for Internal IT and MSPs handling leavers.
Immediate — on the last day 5 items
-
Disable the account
Disable rather than delete. Deleting first can destroy access to data you still need.
-
Revoke active sessions and tokens
A disabled account can still have live sessions on a phone. Force sign-out everywhere.
-
Remove MFA devices
Clear registered authenticators and phone numbers so recovery cannot be used later.
-
Revoke VPN and remote access
Include anything with its own credential store separate from the directory.
-
Remove from privileged groups
Admin rights first, everything else after.
Data and mailbox 3 items
-
Decide mailbox handling
Forward, delegate or convert to shared — and record who authorised it.
-
Preserve files
Transfer ownership of their documents to the manager before any deletion clock starts.
-
Reassign shared resources
Anything they owned — distribution lists, shared drives, licences, scheduled jobs.
Assets and closure 4 items
-
Recover hardware
Laptop, phone, dock, tokens, keys. Record the return against the asset so custody is closed.
-
Wipe and re-stock the device
Wipe, then either return it to stock or retire it depending on age.
-
Cancel or reassign licences
Reclaiming licences at offboarding is where most licence overspend hides.
-
Record the completion
Note who did each step and when — this is the part an auditor asks for.
How to use it
Download
Grab the file. No sign-up, no email wall.
Import
In Vertask, go to Workbooks → Import and choose the file. It becomes a working checklist.
Make it yours
Edit any step, add your own, then clone it per client, property or device.
Importing needs the Workbooks feature, which is on paid plans. The file is plain JSON, so you can open and adapt it either way.