Employee offboarding process: access, assets, and records control

What a controlled offboarding process has to cover

A controlled employee offboarding process removes system and building access on time, recovers every company asset issued to the person, settles final pay and handover, and closes the employee record under the right retention rules. The trigger is the moment a resignation or termination is confirmed, not the last working day.

In enterprises the gaps open between departments. HR accepts the resignation, but IT learns about it from the leaver's farewell email. Facilities never hears at all, and the access card keeps working. The laptop comes back; the company phone and fuel card do not.

Handover is part of control too. Client relationships, approvals the leaver held, and files on personal drives each need a named recipient before the person goes.

Access removal is the exit risk that cannot wait

A former employee with live email, ERP or customer system access can view or remove confidential data. Shared accounts and passwords the leaver knew are a further exposure that often goes unnoticed.

Agree with IT which access is removed at the end of the last working day and which goes earlier, for example on the day notice is given for roles handling sensitive data. For involuntary exits, coordinate removal for the moment the person is informed.

The removal list should come from the employee's actual permissions, not from someone's memory. If the system knows what was granted at onboarding and through later role changes, it knows what to revoke.

Remember access outside the corporate network: supplier portals, banking tokens, social media accounts the leaver managed, and cloud tools a department signed up for on a company card. Ask the line manager to list these during the handover discussion.

Recovering company assets before the last day

Asset recovery fails when nobody knows what was issued. IT usually tracks laptops, but phones, tablets, tools, uniforms, keys, corporate cards and vehicles may sit in different departments' records or in none.

Record assets against the employee at the point of issue. At exit, the list of items to return becomes a report rather than an investigation. Set the return date before the last day so there is time to follow up. Ask the line manager to confirm the return of tools and equipment used on site, since IT and facilities may not know they exist.

Any deduction from final pay for unreturned items needs a clear contractual basis and correct handling under employment law. Take advice from your employment adviser before acting on it.

An exit control register for each leaver

Keep one register per leaver, with an owner and a status on each line, so anyone can see what is still open. The register also gives internal audit one place to test exit controls without collecting evidence from four departments.

• Exit confirmed: resignation letter or termination notice recorded, with the last working day
• Handover plan agreed with the line manager, covering files, clients and open work
• System access schedule set with IT, listing each application and its removal date
• Building access cards and keys collected by facilities
• Company devices, vehicles and corporate cards returned and inspected
• Leave balance, claims and final pay inputs confirmed with payroll
• Exit interview offered, with notes stored under restricted access
• Employee record closed, with retention and archiving applied

Records after exit: final pay, retention and references

Final pay depends on accurate inputs: last working day, unused leave, outstanding claims and any recoveries. Errors here cause disputes, so payroll should confirm inputs with HR instead of working from emails. Obligations on final pay and the related EPF, SOCSO, EIS and tax steps should be checked against official sources or with your payroll adviser.

After exit, the record should become read-only for most users. Personal data must still be handled under the PDPA, including how long it is kept and who can open it. Agree retention periods by record type with your adviser and apply them to every leaver, rather than keeping everything forever or deleting too early.

Reference requests are simpler when the record shows dates, last position and any agreed reference wording.

Making exits consistent across business units

Subsidiaries often run offboarding differently, so the group's real exposure depends on which unit the person left. A single register template, with tasks raised automatically when an exit is recorded, gives every unit the same controls. Review a sample of closed registers each quarter, look for lines closed late or without evidence, and take the pattern back to the department that owns them.

BukuHR is Fasttrade's product for HR teams, covering onboarding and exit along with people records, requests and approvals, and team visibility. Fasttrade can confirm whether its current scope suits your exit process across business units.

Frequently asked questions