Security training, usually mandated by some insurance policy, regulation or something else, typically lists "disgruntled employee" as the number one internal se

Security training, usually mandated by some insurance policy, regulation or something else, typically lists "disgruntled employee" as the number one internal security threat. Cutting off access prior to or immediately following notification of termination is more or less the only remedy to prevent data exfiltration from such a person. Even if there were some programmatic way to ensure they could only email internal addresses, there are still some risks. I think it'd be worth implementing myself, though I can see it being rather difficult or impossible to set up depending on how the company's email is run.