Business Operations · THE NO-PANIC PLAN
Offboard a U.S. employee securely and close payroll records
Employee exits create a short window in which access, equipment, final pay, benefits and records must be handled by different owners. NIST's personnel-termination control is a useful security reference for prompt credential revocation and property recovery, but NIST SP 800-53 is not a universal private-employer law. Final-pay timing and other separation duties vary by state, contract, worker type and plan. This workflow is an operations checklist, not employment-law advice; confirm the actual requirements with the relevant agencies and qualified counsel.
MISSION Help a U.S. employer coordinate employee separation across manager/HR, IT, payroll, facilities and records owners while protecting access, final-pay accuracy and retained evidence.
Coordinate HR, IT and payroll before the employee's effective exit timeTHE REAL-WORLD BIT
What happens outside this browser tab?
Confirm an authorized separation plan and need-to-know notifications; time access revocation to the effective separation; recover assets and transfer business records; calculate final wages and benefits under applicable deadlines; then retain the decision, pay and security evidence under the proper schedules.
YOUR CHECKLIST, WITH FEWER DRAMATIC SIGHES
One step at a time.
Follow the order below. If a step names a Nirmion tool, its link is right there with it.
- 01
Authorize the separation and assign owners before acting
Have the responsible HR/manager record the effective date and time, decision authority, employee/contractor status, notice plan, direct manager and contacts for IT, payroll, facilities, benefits and legal review. Limit notifications to people who need to carry out the exit; do not circulate medical, performance or personal details broadly. Identify any active investigation, legal hold, safety issue, accommodation or protected-activity concern and route it to qualified HR/legal staff before changing records. Prepare a task list tied to the effective time, including systems, physical keys, cards, devices, customer handoff and scheduled payments. The Offboarding Checklist (tool 12225) can organize owner-assigned tasks; it does not decide whether a termination is lawful or choose the separation date.
- 02
Revoke access and preserve business records at the agreed time
Coordinate HR's effective-time notification with IT/security so accounts, sessions, remote-access paths, badges and shared credentials are disabled or rotated according to the organization's risk plan. NIST SP 800-53 Rev. 5 includes a personnel-termination control for disabling system access and revoking authenticators; use that as a control-design reference and set a practical organization-specific time, rather than treating its federal control text as a private-sector legal deadline. Preserve company records, mailboxes and files under retention/legal-hold rules before removing access; transfer ownership of work accounts and critical tasks to a successor. Do not delete the employee's records or use personal devices/accounts to retrieve company data without authorization.
- 03
Recover property and transfer work with a documented handoff
Use an itemized return list for laptop, phone, keys, badge, security token, payment card, vehicle, records and other company property; record the condition, date returned and responsible custodian. Close or transfer access to company purchasing, banking, vendor and customer systems, revoke API keys or shared secrets the employee could access, and reassign open approvals and renewals. Capture project status, customer commitments, deadlines, supplier contacts and the location of current source records through a manager-approved handoff. NIST identifies recovery of system-related property and maintaining access to organizational information as termination-control outcomes. Avoid withholding wages or making deductions for missing property unless counsel confirms that the action is permitted in the employee's jurisdiction.
- 04
Calculate final pay and communicate benefits using the right jurisdiction rules
Ask payroll to reconcile hours worked, salary or commission due, approved expenses, deductions, accrued leave treatment, benefit contributions and any required wage statement using the records and written policy. Check the applicable state labor department for the employee's work location and separation type before setting the final-payment date: the U.S. Department of Labor says federal law does not generally require immediate final pay, but some states do. Coordinate benefit continuation, retirement-plan notices, insurance end dates and unemployment information with the plan administrator and applicable agencies, using the employee's actual plan and state rules. Provide a clear contact for pay questions and preserve the calculation/review record; do not promise a universal last-paycheck deadline.
- 05
Close the record set and verify nothing remains assigned to the former employee
Have HR, payroll and IT confirm completion of their assigned actions, note any exception with an owner and due date, and reconcile access inventories against the former employee's role. Retain the separation decision, notices, time/wage records, final-pay evidence, returned-property receipt and access-revocation confirmation only for the period required by the relevant record schedule; apply legal holds before deletion. IRS guidance requires employment-tax records to be kept at least four years, while EEOC personnel-record retention rules can apply separately and may specify a different period, so do not use one blanket retention date for every record type. Review incidents or handoff gaps and update the exit checklist; use the tool to organize tasks without storing sensitive medical, bank or identity details.
THE HELPER CREW
Tools for the fiddly bits.
These are the currently published Nirmion tools matched to this guide. Open a tool page for its accepted inputs and limits.
RECEIPTS, PLEASE
Sources & review notes
Each source is linked to the steps it supports. Open it to check its scope and current guidance.
Source checked 2026-10-06