A department head at a university resigned on the first day of the spring semester. It was subsequently determined that the department head deleted numerous files and directories from the…

Time-of-day restrictions limit when an account can log in, but they would not prevent an employee with active credentials from deleting files during an authorized logon period if their account was still enabled after resignation.

Permission auditing and review involve regularly checking and adjusting access rights to enforce the principle of least privilege, but this process would not inherently prevent a departing employee from misusing existing valid permissions before their access is revoked.

Offboarding is the critical policy and procedure that governs an employee's departure from an organization, explicitly including the immediate revocation of all system and resource access. A robust offboarding process ensures that user accounts are disabled or removed promptly upon an employee's resignation, thereby preventing unauthorized access and potential malicious activities like file deletions post-departure.

Account expiration sets a predetermined date for an account to become inactive and is not dynamically triggered by an event like a sudden resignation, thus it would not immediately disable the department head's access.