How must user accounts for exiting employees be handled?
Disabled, regardless of the circumstances
Disabled if the employee has been terminated
Deleted, regardless of the circumstances
Deleted if the employee has been terminated
You should always disable an employee’s account as soon as they leave. The employee knows the username
and password of the account and could continue to log in for potentially malicious purposes. Disabling the
account will ensure that no one can log in using that account.