IT offboarding checklist: how to secure an employee's departure
When employees leave the company, IT teams face a critical task: every device has to come back, access has to be switched off and licences have to be reassigned. Incomplete IT offboarding does not just endanger security — it costs real money.
Why IT offboarding matters so much
According to a study by Oomnitza, companies lose an average of $1,200 in IT hardwareand licences per departing employee — because no systematic process exists. In the German Mittelstand the picture is similar: spreadsheets, verbal agreements and missing handover records mean devices disappear and access stays live.
A professional IT offboarding process protects you from:
- Security risks:Former employees keep access to email, cloud storage and internal systems
- Compliance breaches:The GDPR requires personal data to be handled correctly after someone leaves
- Loss of assets:Laptops, monitors and peripherals that never come back add up fast
- Wasted licences:Software licences stay assigned to inactive users
The seven-point IT offboarding checklist
- Take stock of the devices:Get a complete picture of every asset assigned to the employee — laptop, phone, headset, monitor, docking station, charging cable. With ITAM software such as AssetNode you see every assignment at a glance.
- Schedule the return:Fix a concrete date for handing the devices back — ideally the last working day. Produce a handover record with serial numbers and a note on condition.
- Switch off access:Systematically disable the email account (Microsoft 365, Google Workspace), MDM profiles (Intune, Jamf, Kandji), VPN access, the password manager and any SCIM-provisioned accounts.
- Reassign licences:Check which software licences were assigned to the employee. Transfer them to a successor or release them.
- Back up and clean the data:Secure the relevant work data before wiping the device. Delete personal data in line with the GDPR and record it in the audit log.
- Reset the device:Perform a factory reset — remotely via Intune or Jamf for MDM-managed devices. Then assign it to the new employee or release it to the marketplace for disposal.
- Document the offboarding:Record the return date, device condition, disabled access and released licences in the audit trail. For ISO 27001-certified companies this is mandatory.
What does poor IT offboarding cost?
The cost of unstructured offboarding can be put in concrete numbers:
Typical losses per departing employee
| Cost factor | Average cost |
|---|---|
| Hardware never returned | €800–1,500 per laptop |
| Unused licences | €50–200 per month per employee |
| Security incidents | avg. €4.35 m per data breach |
A single forgotten admin account can be enough to put the entire IT infrastructure at risk.
How AssetNode automates IT offboarding
AssetNode simplifies the offboarding process through three core features:
- A single assignment overview:Every asset assigned to an employee (hardware, licences, peripherals) at a glance
- Automatic MDM synchronisation:Device status is updated in real time from Intune, Jamf and Kandji
- Audit trail:Every device return and change of condition is logged automatically
Conclusion
IT offboarding is not a nice-to-have — it is a critical security and compliance process. With a clear checklist and the right ITAM software you make sure that when someone leaves, no device goes missing, no access stays live and no licence is wasted.
Secure your IT offboarding properly
Free for up to 100 assets. No credit card, no server setup.