How to remove access to company email from an employee's phone when they leave, can they still access it

we were late too... the email on the employee's phone stayed active for 2 weeks. it disconnected after the password update

To do upon departure: 1. Reset company email password 2. Wipe phone via MDM 3. Cancel VPN account 4. Check the list

If Multi-Factor Authentication (MFA) is set up, resetting the password breaks two-step verification. Email access is completely cut off.

make an offboarding checklist don't forget to include deleting email from the phone

My questions are cleared up thanks.

There's a trap here let me mention it... When making a decision, first look at what data you have on hand.

Don't rely on a single measure; go layer by layer.

This approach has a cost, which isn't discussed. An automated scan report is not the same as a penetration test.

Correct me if I'm wrong.

I'm curious too. When we decide without measuring, we always end up in the same place.

I think differently. Most incidents start with a leaked password, not a vulnerability.

Start with a small trial; don't commit to everything at once. This is my opinion, I'm not claiming it's absolute truth.

I agree.

Let me summarize the topic, since several different answers were given. If the notification path is long, notifications don't arrive; missing notifications mean delayed incident detection.

Your time to detect an issue directly determines its cost.

Let me speak from the other side; Im on the supplier side. Forgotten test environments are more often the entry point than live systems.

If I were you I'd go this route.

ill try it... btw if you scold false alarms, nobody will report again.

when you try to change everything at once, nothing settles then that's all, sorry if I went on too long.

I'll try it.

Following.

I've been dealing with this for a long time. Taking measures without an inventory leaves doors you haven't seen open.

I'm also curious if anyone does it differently.

I didn't know that.

Correct.