Anonymous wrote:Severence package contingent upon successful transmission of passwords
Anonymous wrote:Put a keystrokes tracker on laptop
Anonymous wrote:Put a keystrokes tracker on laptop [/quote
Not as helpful as you think. Doesn’t resolve 2FA issues. Assumes employee will log into every account during the time it’s installed. Assumes none of the passwords are autofilled (which sounds great until you consider that the employee can change them after getting fired).
Anonymous wrote:Ask them to provide a password spreadsheet.
Log into the account and change all passwords.
Fire them.
Anonymous wrote:Anonymous wrote:Anonymous wrote:Anonymous wrote:Anonymous wrote:Give a generous severance package. This is going to cost you either way.
It's a small org, can they afford to be "generous"?
The password thing was an oversight.
They need to get the passwords prior to termination.
Termination may need to be delayed by a week or two.
It’s a small org, can they afford not to?
Of course they can lol
PP said ask for a spreadsheet and change the passwrods before you give them the boot.
What are they going to do, say "no"?
Yup. And I’ve seen it happen.
Anonymous wrote:Anonymous wrote:Anonymous wrote:Anonymous wrote:Anonymous wrote:Give a generous severance package. This is going to cost you either way.
It's a small org, can they afford to be "generous"?
The password thing was an oversight.
They need to get the passwords prior to termination.
Termination may need to be delayed by a week or two.
It’s a small org, can they afford not to?
Of course they can lol
PP said ask for a spreadsheet and change the passwrods before you give them the boot.
What are they going to do, say "no"?
Yup. And I’ve seen it happen.
Anonymous wrote:Anonymous wrote:Here’s how it can go if you refuse to be transparent and pay a generous severance. The boss says “I/the auditor needs all the passwords.” Suspicious employee gives some not all. Boss doesn’t realize it because they’re so out of the loop and the auditor thing was a ruse so they don’t catch it either. Or, they do get all the passwords, but they don’t know the 2FA involved employee’s personal phone number. Person gets termed with a very bitter taste in their mouth. Boss realizes they have incomplete information and asks former employee to help. They won’t return boss’s call or say sure, in exchange for the severance you should have offered in the first place.
In some cases they will even go back and change the passwords again for the things they still have access to.
For most databases, the license is for the company not just one individual. Call customer support and have them reset the password and change the administrator.
It costs nothing.
Leadership needs to get together and make a list of all the databases and accounts that this person uses.
Speak to the employee, get the information.
The Company then changes the passwords so that the employee can't get back in.
Fire them when they're at home so that they do not have access to the work computer again.
Cut-off their VPN access so they cannot access the system from home.
Severance is unheard of for most small orgs outside of executives and C-suite.
Handing over passwrods is a part of job performance and a succession plan as is writing your job description/ duties and responsibilities.
If you don't want it to look suspicious, have everyone do it (they should do this anyway).
Anonymous wrote:Here’s how it can go if you refuse to be transparent and pay a generous severance. The boss says “I/the auditor needs all the passwords.” Suspicious employee gives some not all. Boss doesn’t realize it because they’re so out of the loop and the auditor thing was a ruse so they don’t catch it either. Or, they do get all the passwords, but they don’t know the 2FA involved employee’s personal phone number. Person gets termed with a very bitter taste in their mouth. Boss realizes they have incomplete information and asks former employee to help. They won’t return boss’s call or say sure, in exchange for the severance you should have offered in the first place.
In some cases they will even go back and change the passwords again for the things they still have access to.
Anonymous wrote:Anonymous wrote:Anonymous wrote:Anonymous wrote:Give a generous severance package. This is going to cost you either way.
It's a small org, can they afford to be "generous"?
The password thing was an oversight.
They need to get the passwords prior to termination.
Termination may need to be delayed by a week or two.
It’s a small org, can they afford not to?
Of course they can lol
PP said ask for a spreadsheet and change the passwrods before you give them the boot.
What are they going to do, say "no"?
Anonymous wrote:Anonymous wrote:Anonymous wrote:Give a generous severance package. This is going to cost you either way.
It's a small org, can they afford to be "generous"?
The password thing was an oversight.
They need to get the passwords prior to termination.
Termination may need to be delayed by a week or two.
It’s a small org, can they afford not to?