3 ms·
The lesson here is that once an employee or contractor is terminated, you remove all access to internal infrastructure. That's it. That is the lesson.
by ianhawes 3y ago
The lesson here is that once an employee or contractor is terminated, you remove all access to internal infrastructure. That's it. That is the lesson.
- rglullis 3y agoThen your company is still susceptible to being destroyed by any random employee.
- dylan604 3y agoPotentially, yes. Someone could go nutty before being dismissed, and it just be Tuesday. That's why there's things we often refer to in this industry as backups. If it is just a software bit of mischief, you should be able to recover from that without too much down time. s/disgruntled employee/ransom ware/ and it's really no different.
- makeitdouble 3y agoNot "terminating" your employees and having meaningful conversations on how it goes after they know they're let go helps a lot. That forces the employer to come up with actual explainations someone can digest, and gives the employee time to be rational and plan the pivot. There will still be ugly stories, and preemptively removing accesses will be needed in some cases, but that's by far the exception and not the norm, and we usually know when that will be the case.