#006UrgentIdentity & accessDifficulty 2/3
Former employee still has access to company files
Reported by Drew Okafor, Owner
Intake
A designer who left three months ago appears in the activity log of the design library. Drew is alarmed and asks 'what else can they get to?'
Evidence gathered
- ▸Account is disabled in Microsoft 365 — but there is a second, personal-email guest account
- ▸Legacy Dropbox share still lists their personal address
- ▸Adobe Creative Cloud seat still assigned
- ▸No offboarding checklist was completed at the time
Guided diagnosis
1. The Microsoft 365 account is disabled, yet access continues. What is the likely explanation?
2. What is the immediate action?
3. What must you report to the owner?
4. Which process change prevents recurrence?