But if those keys represent Person A at Company X then who owns them? Can the company use them if they don't represent the truth anymore? Who's responsibility

But if those keys represent Person A at Company X then who owns them? Can the company use them if they don't represent the truth anymore? Who's responsibility is it to guard/change/dispose them?