The Former Tutor Still Downloading Records

Daniel’s contract ended two weeks ago, but his account still works. When a recent export reveals downloads of learner records, Northmere Skills College discovers a gap between HR, department managers, IT and independently managed applications. This fictional case explores how missed departure notifications, excessive permissions and persistent sessions can leave information exposed. It also explains why disabling an account cannot automatically retrieve downloaded copies—and why evidence of a download does not establish what happened next. Follow the college’s response, from containing access and preserving evidence to assigning responsibilities, reviewing temporary permissions and verifying account closure across every relevant system. The central lesson: a completed departure checklist needs evidence that access actually ended. Northmere, its staff and these events are fictional and illustrate practical cybersecurity risks. What you will learn Connect departure notifications with accounts in every relevant application. Check exports, permissions and active sessions after access is removed. Connect the technical issue to the people, decisions and everyday work affected by it. Use this video with your team This episode is for business owners, managers, staff and IT colleagues who want to discuss cybersecurity in plain English. Watch together, choose one relevant process, and agree who will check it, what evidence they will collect and when you will review the result. Use an authorised exercise with artificial records when testing a change. Join the discussion Could a former worker still use an application outside your central account system? Share your approach in the comments without including confidential information. If this explanation helped, like the video, share it with a colleague and subscribe to Bovens GRC Solutions for more practical cybersecurity lessons. #Cybersecurity #EmployeeOffboarding #AccessManagement #AccountDeactivation #LearnerDataProtection #LeastPrivilege #TemporaryAccess #SessionRevocation #DataExports #IncidentResponse #IdentityAndAccessManagement #EducationCybersecurity #AccessReviews #OffboardingChecklist #CybersecurityAwareness