NIST Guidance

NIST 800-53, PS-4 is actually the most detailed of any standard, and in addition to what is summarized above, calls for exit interviews and access to any stored records the employee created. Their stance is that when employment is terminated, the organization terminates information system access, conducts exit interviews, ensures the return of all organizational information system-related property (e.g., keys, identification cards, building passes), and ensures that appropriate personnel have access to official records created by the terminated employee that are stored on organizational information systems.

PS-5 states that the same policies and procedures as stated in PS-4 should apply to staff that transfer positions.

Much like NIST 800-53, NIST 800-14 is a detailed standard and stipulates provisions for both friendly and unfriendly termination. Friendly termination requires removal of access privileges, accounts and tokens, a confidentiality briefing, return of property, and any cryptographic keys should be made available to management. Unfriendly termination dictates that account and access privileges should be revoked as soon as possible, before notification of termination or immediately upon resignation.