WhatsApp

Identity, Access & Zero Trust

11/12/2026

Authentication, least privilege, access reviews and identity lifecycle controls.

How to Secure a Laptop Before Shipping It to a Remote Employee

A laptop shipped to a remote employee may be lost in transit or arrive before secure enrollment is complete. Preconfigured access and recovery methods must work without exposing credentials in the package. What to check Confirm encryption, device management enrollment, patch level, asset assignment, shipping tracking, first-login requirements, recovery...

How to Protect a Work Phone Before Sending It for Repair

A phone sent for repair may contain business email, authentication apps, client files, or active sessions. Repair requirements vary, and removing every security control can create access risk or erase needed evidence. What to check Confirm device ownership, management status, backup state, repair provider requirements, encryption, account sessions, and...

How to Handle a Work Account After an Employee Changes Their Name

A name change can leave email aliases, directory display names, login identifiers, certificates, and third-party accounts inconsistent. Updating the visible name alone may break sign-in or leave old personal information exposed. What to check Inventory identity records, aliases, authentication factors, device certificates, application accounts, and...

How to Remove a Former Contractor’s Access From Personal Devices

A contractor may have accessed work email or files from a personal phone or computer. Disabling the central account may not remove cached sessions, downloaded content, or application tokens on those devices. What to check Review account sessions, device registrations, app protection status, OAuth grants, file sync, and offboarding records. Determine...

How to Review Access After Moving a User to a New Department

A department change can leave old group memberships and application roles in place while adding new permissions. Access may be inherited from nested groups or local application assignments that central identity reports do not show. What to check Compare current access with the new role, review group nesting and app-specific assignments, identify...

How to Review Device Access After an Employee Returns From Leave

An employee returning from extended leave may use a device that missed updates or retains stale sessions. At the same time, legitimate access may have been suspended or changed during the absence. What to check Check device compliance, patch and encryption status, account state, authentication factors, role assignments, and any temporary delegation....

How to Remove Work Data From a Laptop Before It Is Reassigned

A laptop being reassigned may retain the prior employee’s files, browser sessions, certificates, cached credentials, or local application data. A quick user-account deletion may not clear all business information. What to check Check device management status, encryption, local profiles, synced folders, browser data, certificates, recovery keys, and...

How to Protect a Work Tablet Before It Is Used for Customer Signatures

A tablet used for signatures may store customer names, agreements, or authentication sessions. Shared devices can retain documents or allow the next user to access the prior customer’s information. What to check Review kiosk or shared-device mode, screen lock, encryption, app data retention, network access, device management, user identification, and...

Show another 8 pages