[UNCLASSIFIED]RE: [clug] Detecting malicious former employees

[Michael Still]

Antti.Roppola at brs.gov.au wrote:
> Michael Still wrote:
> 
>> We're not talking about a specific person though. I would expect
>> any organization to have an "exit checklist" that ensures that
>> someone in a trusted position has their access revoked properly.
>> We're talking about what should be on that checklist.
> 
>> (In fact, in the US, it's pretty much legally required).
> 
> After chatting about this with a few people, I was thinking that this
> would be a good topic for a HOWTO. Sure enough, there's already a
> few, but few available checklists (found thus far) exhaustively list
> things that a disgruntled employee might exploit.

It seems to me that a wiki is the place to do that, as the list will by
definition always be growing.

Mikal