Employee and Contractor Offboarding Procedure

Organization: Igzibo Engineering Solutions, Inc.
Version: 1.1
Status: Living policy
Effective Date: September 16, 2026
Owner: Igzibo Engineering Solutions, Inc.
Review Cycle: At least annually and after material changes to applicable law, client requirements, technology, or business operations.

1. Purpose

Establishes minimum actions when an employee, contractor, consultant, recruiter, or other authorized individual ends or materially changes their relationship with Igzibo.

2. Scope

Employees, contractors, consultants, recruiters, temporary workers, and other personnel with organizational access.

Definitions

Access: The ability to enter, use, view, modify, or administer an organizational system, application, facility, account, or information resource. Igzibo: Igzibo Engineering Solutions, Inc. Offboarding: The controlled process for ending or reducing an individual's organizational access and responsibilities. Privileged Access: Access permitting administrative, security, configuration, or other elevated capabilities. Service Account: A non-human identity used by an application, integration, automation, or other service.

3. Core Principles

Offboarding must be timely, coordinated, attributable, proportionate to risk, documented, and consistent with contracts.

4. Trigger and Access Removal

The responsible manager must initiate offboarding for departures, contract completion, assignment changes, access changes, or security concerns. Remove accounts, sessions, groups, privileged access, VPN access, application access, and tokens as appropriate.

5. Equipment and Work Product

Return or account for computers, mobile devices, security keys, badges, documents, client equipment, source code, project records, client materials, research records, and organizational credentials.

6. Client and Recruiting Handover

Transfer active project information, client contacts, deliverables, risks, decisions, candidate records, authorizations, recruiting records, and relevant communications.

7. Personal Devices and Service Accounts

Remove organizational information from authorized personal devices where permitted. Transfer ownership of service accounts and rotate credentials where necessary.

8. IP, Confidentiality, and Records

Follow the Intellectual Property and Work Product Policy and applicable agreements. Preserve confidentiality after departure. Do not delete, alter, or conceal records subject to retention, investigation, dispute, or legal hold.

9. Confirmation, Exceptions, and Enforcement

Material offboarding actions should be documented. Exceptions require authorization. Failure to complete required actions may result in corrective, contractual, or access-related action.

10. References and Research Basis

• NIST, Cybersecurity Framework (CSF) 2.0.

Version History