Re: Access and the Terminated Employee

[Chris Green <cmgreen () UAB EDU>]

Generally, we only lock accounts (rather than access) in extreme situations.  The benefits/w2 information can be 
obtained from our HR department directly if they are one of the people we've locked their userid. Otherwise, we 
generally try to be very granular with permissions since the common transitions are student>employee employee>student 
employee transfer> employee.


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Feehan, 
Patrick
Sent: Wednesday, March 02, 2011 11:58 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Access and the Terminated Employee

Good Afternoon All:

We are having a discussion about the amount of access a terminated employee can have to (arguably) their information on 
(clearly) our systems.  This came up in context of employees who had terminated, either voluntarily or involuntarily, 
and then found that they did not have access to their electronic W-2 information they had requested while in the employ 
of the College.

In general, do you have policies or processes which dictate what access (if any) a terminated employee may have to wage 
or benefit information?  Does it make a difference if they were fired versus left on their own (moved on) or even 
retired?

Thanks.


Patrick J. Feehan JD, CIPP
Director of IT Privacy & Cybersecurity Compliance Montgomery College
(240) 567-3087
patrick.feehan () montgomerycollege edu