HR & Awareness

Offboarding Policy

A offboarding policy template defining revocation of access, return of assets and knowledge transfer when someone leaves, aligned to ISO 27001, NIST SP 800-53, SOC 2.

14-20 pages|Updated 2026-09-12|3 frameworks

What's Included

1. Purpose & Scope

Objective and departure types covered.

Policy ObjectiveDeparture TypesRoles and Responsibilities

2. Notification & Trigger

HR must tell IT before the last day.

Notification TimingImmediate Termination PathContractor End Dates

3. Access Revocation

The control that actually matters.

Revocation DeadlineSystems ChecklistPrivileged Account PriorityFederated and SaaS Accounts

4. Asset Return

Recovering company property.

Asset ChecklistDevice WipeCredential and Token ReturnNon-Return Escalation

5. Data & Knowledge

Preserving what the organisation needs.

Mailbox HandlingFile Ownership TransferHandover Documentation

6. Obligations After Departure

What continues.

Confidentiality ReminderReturn of Information DeclarationRestrictive Covenants

7. Verification & Review

Proving it happened.

Completion ChecklistPost-Departure Access AuditAnnual Policy Review

Frequently Asked Questions

What should a offboarding policy include?

A comprehensive offboarding policy should include purpose & scope, notification & trigger, access revocation, asset return, and more. This template covers 7 key sections aligned to ISO 27001, NIST SP 800-53, SOC 2 requirements.

Which frameworks require a hr & awareness policy?

Major frameworks requiring hr & awareness policies include ISO 27001, NIST SP 800-53, SOC 2. This template maps directly to their control requirements, making it easier to demonstrate compliance across multiple standards.

How often should a offboarding policy be reviewed?

Best practice is to review your offboarding policy at least annually, or whenever significant changes occur in your organisation, technology environment, or regulatory landscape. Most frameworks including ISO 27001 and NIST CSF require documented policy review cycles.

Build Your Compliance Programme

Pair this policy template with our compliance platform to map controls across 686+ frameworks, run self-assessments, and get AI-powered compliance advisory.

Get Started Free →

Free forever — no credit card required