During Involuntary termination of an employee, which of the following is the MOST important step to be considered?

A. Get a written NDA agreement from an employee

B. Terminate all physical and logical access

C. Provide compensation in lieu of notice period

D. Do not communicate to the respective employee about the termination

For CISA exam you should know below information about Terminated Employee Access

Termination of employment can occur in the following circumstances:

On the request of the employee (Voluntary resignation from service)

Scheduled (On retirement or completion of contract)

Involuntary (forced by management in special circumstances)

In case of an involuntary termination of employment, the logical and physical access rights of employees to the IT infrastructure should either be withdrawn completely or highly restricted as early as possible, before the employee become aware of termination or its likelihood.

This ensures that terminated employees cannot continue to access potentially confidential or damaging information from the IT resources or perform any action that would result in damage of any kind of IT infrastructure, applications and data. Similar procedure in place to terminate access for third parties upon terminating their activities with the organization.

When it is necessary for employee to continue to have accesses, such access must be monitored carefully and continuously and should take place with senior managements knowledge and authorization.

In case of a voluntary or scheduled termination of employment, it is managements prerogative to decide whether access is restricted or withdrawn. This depends on:

The specific circumstances associated with each case

The sensitivity of employees access to the IT infrastructure and resources

The requirement of the organizations information security policies, standards and procedure.

The following were incorrect answers:

The other options presented are incorrectly describes about involuntary termination.

The following reference(s) were/was used to create this question:

CISA review manual 2014 Page number 361 and 362