Employee Termination & Change of Employment Checklist¶
The following actions must be completed by the stated person responsible in order to comply with the organization's information security policy. Per the Access Control Policy, all access must be revoked on the leaver's last working day (same-day offboarding); where there is a perceived risk, access may be revoked earlier.
Access revocation is executed by Thomas Picauly (platform/access owner), with the ISM (Olaf) confirming completion. (Formerly asked who executes revocation across workspace/system administrator role) — there is no IT service desk.
| NO | TASK | RESPONSIBLE | REF NOS | COMPLETED DATE/TIME | BY | COMMENTS |
|---|---|---|---|---|---|---|
| 1 | Revoke access to all systems on the last working day (Google Workspace, AWS, GitHub, Stripe, Intercom, Sentry, PostHog, Netlify, and any other accounts) | System administrator | ||||
| 2 | Email autoresponder / forwarding set up | System administrator | ||||
| 3 | Return company laptop, including accessories, and any hardware security token (if issued) | Manager | ||||
| 4 | Return any other company equipment or payment cards, if issued | Manager | ||||
| 5 | Return (or securely delete if not required) classified documents and company data held on personal devices or local storage | Manager | ||||
| 6 | Knowledge transfer | Manager | ||||
| 7 | Define post-employment information security responsibilities and duties that remain applicable | Manager | ||||
| 8 | Termination interview held | Manager |
Declaration¶
I have returned all equipment and other assets provided to me by Soon as part of my employment. I have returned all classified documents in my possession and have destroyed any uncontrolled copies, including company data held on personal devices. The information security responsibilities and duties that remain applicable after my employment has ended have been explained to me and I agree to comply with them.
Name of Employee:
Signature of Employee:
Date:
Accepted on behalf of Soon:
Name:
Title:
Signature:
Date:
A copy of this statement should be retained by the employee and filed in the relevant personnel records of Soon.
Change log¶
| Version | Date | Author | Comments |
|---|---|---|---|
| 0.1 | 2025-06-07 | Olaf Jacobson | First draft document |
| 0.2 | 2026-07-18 | Andrea Cardinali | Cleaned up and made Soon-specific (ISMS overhaul) |