Offboard a departing employee when an executive requests a mailbox copy

Instruction: Separate access removal, data preservation, and data disclosure. Give the executive a usable answer while retaining clear ownership for unfinished offboarding tasks.

Context:

In this fictional organization, an authenticated HR ticket instructs IT to remove a departing employee’s access at 17:00. It does not authorize deletion or data transfer. The offboarding runbook assigns identity containment to the identity team, device recovery to desktop support, and mailbox preservation and any disclosure to the messaging team after data-owner and privacy approval. No retention period is supplied. At 16:50 an executive asks you to export the entire mailbox to a personal USB drive for tomorrow’s client meeting. A successor needs three client documents, but no transfer approval is recorded. You coordinate the ticket; you cannot approve disclosure or retention decisions.

Updated

Official answer available

Read the opening below, then unlock the full answer and practical guidance.

I would keep the authorized 17:00 access removal on schedule and treat the executive’s mailbox request as a separate disclosure decision. The HR ticket authorizes offboarding, not a personal copy of all correspondence. I would preserve the request and find an approved route for the three documents the successor actually needs...

Upgrade to view official answer

Related Questions