An employee was terminated and promptly escorted to their exit interview, after which the employee left the building. It was later discovered that this employee had started a consulting business…

Database administrators manage data access within database systems but do not set organizational offboarding policy or determine endpoint device control strategies.

Human Resources must review and strengthen termination procedures - including immediate system access revocation and clear acceptable use policies that govern data removal by departing employees.

Finance has no relevant authority or responsibility over employee termination procedures, data handling policies, or IT security controls.

Network administrators manage network infrastructure and connectivity but are not primarily responsible for endpoint DLP policy decisions or the offboarding process for terminated employees.

IT Management is responsible for implementing technical preventive controls such as USB port restrictions, endpoint data loss prevention (DLP) tools, and ensuring that security policies are enforced at the system level to block unauthorized data exfiltration.