Why are Risks to Data Security a concern when employees leave?

When employees leave, there's potential for them to take sensitive data or company information with them, either intentionally or inadvertently. They may have had access to proprietary information, client data, or strategic plans, which could be used by competitors or misused in other ways if not properly managed.

What are the primary risks associated with departing employees?

The primary risks include: Unauthorized access to sensitive data after departure, Transfer of proprietary or sensitive data to personal devices or external accounts, Potential disclosure to third parties or competitors, Leaving backdoors or vulnerabilities in the system

How can companies take prevention of unauthorized data access after an employee leaves?

Companies can employ measures such as revoking access credentials, regularly auditing user activities, and ensuring prompt deactivation of accounts associated with departing employees or opting techniques like data masking.

Are exit interviews important from a data security perspective?

Absolutely! Exit interviews allow employers to remind departing employees of their non-disclosure agreements and other obligations. They also provide an opportunity to understand what data or information the employee had access to and to retrieve any company property or data.

Should we be concerned about employees moving to competitors?

Yes, especially if they had access to proprietary data or trade secrets. It's wise to have non-compete and non-disclosure agreements in place, and to remind employees of these agreements upon their departure.

What's the role of IT in ensuring data security during employee transitions?

IT plays a pivotal role. They ensure that all digital footprints of a departing employee are managed appropriately – from deactivating accounts, monitoring email forwarding rules, to wiping company data from personal devices.

How can companies ensure that employees don’t leave with important data on their personal devices?

Implementing a robust Bring Your Own Device (BYOD) policy can help. This includes clear guidelines on accessing company data, periodic audits, and the ability to remotely wipe data from personal devices if necessary.

Is training significant in safeguarding company data when employees depart?

Definitely. Regular training ensures employees understand the value of data and their responsibilities towards safeguarding it. When they recognize the implications of data breaches, they're more likely to be cautious and compliant.

How can we monitor and ensure that former employees aren’t accessing company systems?

Beyond deactivating accounts, companies should implement system alerts for any unauthorized or suspicious access attempts. Monitoring tools can track IP addresses and activities associated with former employees, helping detect any anomalies.

What if we find out a former employee has breached data security protocols?

First, assess the extent of the breach and the data compromised. Then, take corrective measures like changing security credentials and notifying affected parties. Depending on the severity, legal action against the former employee may be warranted. Always consult with legal counsel to understand the best course of action.

What measures can we take to educate employees about data security before they leave the company?

Before departure, we provide employees with training sessions that highlight data security best practices and their responsibilities regarding confidential information. This empowers them to handle data appropriately and reduces the likelihood of security breaches even after they've left the organization.

Security Awareness Webinar

Cybersecurity Career Paths: Webinar Recording and Resources

Living Security Team

Oct 28, 2022

2 Min Read

Wondering what’s next for your career in cybersecurity? Watch this webinar featuring insights from knowledgeable panel:

Lauren Zink: Manager of Security Culture, Awareness & Training at Indeed
Jana Moore: Chief Information Security Officer North America at Belron International
Amy Scites: Senior Engineer, Information Security & Risk, at Cardinal Health
Katherine Salazar: Senior Cybersecurity Analyst at Fintech Payments and Board member for Women in Cybersecurity

You’ll learn how they got started and get answers to some key questions, such as “Do I need a degree or special certifications to go into cybersecurity?” (Not necessarily.) “I have a degree in education or psychology; can I have a career in cybersecurity?” (Absolutely!) And “I don’t have all the qualifications listed in the job description; what should I do?” (Apply anyway!)

Learn more by watching the webinar recording and checking out the resources below.

And here are some helpful resources from our panel.

What's the best advice you've received in your career?

Deficiencies in an organization can be viewed as "fun challenges" and "opportunities" - Helen Patton
Stay humble and pay it forward – Connie Matthews
Have an Open Mind – Dr. Mansur Hasib

What advice would you give someone starting out in cybersecurity?

Research what path you’d like to go down; use tools like NIST Workforce Framework
Become obsessed: listen to podcasts, read books, read articles, write blogs, do research, join associations and integrate it into every part of your life
Find multiple mentors and schedule meetings with them on a regular basis
Volunteer