Lost laptops and forgotten access are everyday risks. Two controls reduce the impact quickly: encryption and a consistent leaver process.

Encryption: what to confirm

• - Encryption is enabled by default on company devices.
• - Recovery keys are stored securely and can be retrieved when needed.
• - Devices lock automatically when unattended.

Leaver process: the essentials

• - Disable the account, sign out sessions, and remove devices from access lists.
• - Rotate shared passwords the user may have known.
• - Remove access to shared mailboxes, finance tools, and password vaults.
• - Confirm ownership of shared folders and Teams before removing licences.

We can audit encryption status and build a leaver workflow that is consistent and auditable.