What this is
What is a worker offboarding checklist?
What is a worker offboarding checklist?
It is a single controlled record closing out everything a departing worker holds: system accounts, door access, keys and fobs, company property, knowledge and open work, and their final health and pay position. It exists because those items sit with five owners who otherwise never speak. Its signature is where the organisation asserts the person retains nothing.
How does offboarding differ from an access review?
Offboarding is preventive and event-driven: it fires on notice and closes access before the last working day. An access review is detective and periodic: it sweeps the estate and finds what offboarding missed. If reviews routinely surface leavers, offboarding is not working and the review is acting as a backstop, not as assurance.
What does immediate departure change?
An immediate departure — dismissal, walkout, or a security concern — inverts the sequence. Access removal happens first, sometimes within the hour, and asset return and handover follow by arrangement or not at all. The checklist is still completed, but the last working day and the completion date collapse into one, and outstanding items are usually property rather than access.
Scope
When is a worker offboarding checklist required?
This is the closing step of the worker lifecycle. It assumes a provisioning record exists to reverse, and hands off to the registers and reviews that verify closure independently.
Use this template when
- Notice has been given, accepted or served, in either direction
- A contract or fixed term is reaching its end date and will not be renewed
- A worker is being dismissed or leaving immediately, where access removal is urgent
- A worker is transferring out of the organisation to another legal entity
- An access review or audit has found a leaver still holding access and the closure needs a record
Do not use it for
- Worker Role Change Record, which covers a worker who stays but moves, where access is adjusted rather than removed and no property returns
- Key and Access Device Register, which is the standing inventory of issued devices; this checklist updates it, it does not replace it
- Access Control Review, which is the periodic sweep that verifies removals happened, and should not be used to perform them
- Exit Health Assessment, which is the clinical record itself and is carried out by occupational health, not by HR
- Worker Equipment and System Provisioning, which records what was issued on arrival and is the source list this checklist works from
Compliance mapping
Which ISO 27001 cl.6.1 requirements does this satisfy?
The checklist is anchored on ISO 27001 cl.6.1, but the operative duties sit in Annex A, where access, assets and post-employment responsibilities are named controls.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO/IEC 27001:2022 cl.6.1 | Determine risks that need addressing and plan actions to treat them; departure is a foreseeable risk event with a planned treatment. | Header |
| ISO/IEC 27001:2022 Annex A 5.18 | Access rights shall be removed or adjusted on termination or change of employment, in line with the access control policy. | Access removed |
| ISO/IEC 27001:2022 Annex A 5.11 | Personnel shall return all organisational assets in their possession on change or termination of their employment. | Property returned |
| ISO/IEC 27001:2022 Annex A 6.5 | Responsibilities and duties that remain valid after termination shall be defined, enforced and communicated to the person. | People and health |
| ISO 9001:2015 cl.7.1.6 | Determine the knowledge necessary for operation of processes and address gaps when changing needs and trends arise. | Knowledge and continuity |
| ISO/IEC 27001:2022 cl.9.1 | Monitor and evaluate the performance and effectiveness of controls; outstanding item counts are that measurement. | Outcome |
What it does not cover
- A signed checklist with a shared code still unchanged, which leaves a credential the leaver knows in live use, defeating the removal of every individual account on the same door.
- Door access removed but the key register never updated, which leaves the next access review reconciling against a register that still shows the device issued, reading as a control failure rather than a data lag.
- Handover documented as a page nobody was named against, which satisfies the tick but leaves no accountable successor, so open actions age under a disabled account.
- Exit health assessment marked N/A because the worker declined, which is a different fact; a decline is an outcome to record, not a reason to leave the denominator.
- Items outstanding left blank while the outcome says complete, which makes the completion percentage and the outstanding count disagree, and the count is the one an auditor trusts.
Global
Worker Offboarding Checklist requirements by country
Offboarding sits where information security, employment law and data protection meet, and which of the three bites hardest depends on where the worker was employed.
UK GDPR Art.5(1)(e); Employment Rights Act 1996 s.86
Storage limitation constrains how long leaver data may be held, while statutory minimum notice sets the window the checklist has to work in.
You cannot keep a leaver's full personnel record indefinitely to be safe, nor assume a long runway: one week's notice per year of service, capped at twelve, is the statutory floor.
Regulation (EU) 2016/679 Art.5(1)(e) and Art.17
The right to erasure applies to former workers, and each retained field needs a lawful basis that survives the employment ending.
Offboarding has to say what is deleted, what is archived and why. Health surveillance records are the usual exception, retained under occupational health law rather than the employment relationship.
29 CFR 1910.1020; state final pay statutes
Employee exposure and medical records must be preserved for the duration of employment plus thirty years, and final pay timing is set at state level, not federally.
At-will employment makes immediate departures routine, so the access-first sequence matters more, and a same-day termination in a same-day final pay state compresses the payroll item to hours.
How to complete it
How to complete a worker offboarding checklist, step by step
Most fields are binary and self-evident. Four judgement calls decide whether the record survives being pulled in an audit.
N/A removes an item from the denominator, so it is the most consequential choice on the form. Use it only where the worker never held the thing: no vehicle, no locker, no exposure requiring surveillance. Never because the item was not done, could not be done in time, or was somebody else's job. Ninety per cent with half the items marked N/A is a worse record than seventy scored honestly.
Immediate departure is not a synonym for short notice. It means there was no controlled last day, so access removal ran ahead of everything else and asset return may never happen. Marking it changes what a reviewer expects: outstanding property is normal, outstanding access is not. Marking it to excuse a rushed process hides the real failure, a late start.
The outstanding count and its description are the only fields that carry forward once the record closes. An entry reading 'laptop' is useless; 'laptop, held by worker pending return by post, chased 12 March, owner J. Patel' is an action. If anything is outstanding, Action Required should be Yes with a CAPA reference — a closed checklist with outstanding items and no action record is where things get lost.
The trigger is exposure history, not job title or the leaver's willingness. If the worker sat in a similar exposure group with surveillance obligations, an exit assessment is owed. HR usually cannot judge this from the personnel file; route the question to occupational health at notice instead of answering it.
What auditors find
Most common worker offboarding checklist findings
These recur when offboarding records are sampled against the access estate rather than read on their own terms.
| Finding | Clause | What fixes it |
|---|---|---|
| Accounts disabled but not the federated or third-party ones | ISO/IEC 27001:2022 Annex A 5.18 | Enumerate access from the provisioning record and SaaS admin consoles, not the directory alone. Contractor portals and supplier systems are the usual survivors. |
| Checklist created on the last working day, backdated to notice | ISO/IEC 27001:2022 cl.6.1 | Create the record from the HR notice event rather than by hand, so the created timestamp and the notice date are independent and the gap stays visible. |
| Shared door codes never changed because nobody owns them | ISO/IEC 27001:2022 Annex A 5.18 | Assign a named owner to every shared credential in the key register, so the offboarding item resolves to a person rather than to a department. |
| Open actions reassigned to the line manager as a holding position | ISO 9001:2015 cl.7.1.6 | Require a substantive owner and a date at reassignment. A manager holding thirty inherited actions is an unclosed handover with a tick beside it. |
| Health records deleted with the personnel file on departure | 29 CFR 1910.1020 | Separate retention classes before deletion runs. Surveillance records outlive the employment record by decades and must be excluded from leaver purges. |
| Result band recorded as Pass while items outstanding is non-zero | ISO/IEC 27001:2022 cl.9.1 | Make the band derive from the outstanding count rather than from the reviewer's impression, and require a CAPA reference whenever the count exceeds zero. |
Case in point
Case in point: the badge that worked for eleven months
A distribution site reconciled its badge system against the active worker register at annual review. Forty-one badges resolved to people who no longer worked there, and nine had been used in the preceding twelve months, all at the same goods-in door outside shift hours. The site had an offboarding process: an email to IT and a signature on a leaving form. Neither reached the physical access system, run by the facilities contractor under a separate account.
The fix was not more diligence. It was making the key and access register the single object both the checklist and the access review reconciled against, so a badge could not be closed on paper while staying live in the panel. The next review found three discrepancies, all within a fortnight of a leaving date and all traceable to an open checklist.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
6 sections
- Reference
- OPS-042
- Archetype
- Checklist
- Record ID
- OFFB-2026-000
- Scoring
- Offboarding complete on the last day
- Direction
- High is good
- Singleton
- Yes
- Basis
- ISO 27001 cl.6.1
- Links
- Links Key Register, Access Review, Exit Health Assessment
- Tags
- Worker, Offboarding, Exit
- Sections
- 6
- Fields
- 59
- Follow up fields
- 3
- Repeating sections
- 0
- Links out
- 6
Header
16 fieldsChecklist ID*
Auto sequence. Format OFFB-2026-000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Date and Time*
Completed By*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Worker*
Person ID
Links to FDN-003 Person ID
Leaving Reason*
Resignation, end of contract, retirement, redundancy, dismissal, or transfer out.
Notice Given*
Last Working Day*
Checklist Started When Notice Was Given*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Line Manager*
Provisioning Record ID
Links to OPS-039 Record ID
Immediate Departure*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Leavers Who Can Still Open Doors
Every access review finds them, because offboarding was handled as a conversation and a leaving card. The list of what to take back is the provisioning record read backwards.
Access removed
6 fieldsSystem Accounts Disabled On The Last Day*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Door Access Removed*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Keys And Fobs Returned*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Remote Access Removed*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Shared Codes Changed Where They Knew Them*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Key And Access Register Updated*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Property returned
6 fieldsPPE Returned Or Written Off*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Uniform Returned*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Locker Cleared*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Tools And Instruments Returned*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Vehicle And Fuel Card Returned*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Devices And Documents Returned*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Knowledge and continuity
6 fieldsHandover Documented*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Open Actions Reassigned*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Records And Files Transferred*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Single Point Of Failure Identified*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Cover Arranged*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Contacts Informed*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
People and health
6 fieldsExit Conversation Offered*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Reasons For Leaving Recorded*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Exit Health Assessment Where Exposed*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Health Records Retained Correctly*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Final Pay And Entitlements Processed*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Worker Register Marked Inactive*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Outcome
19 fieldsOffboarding Complete By The Last Day*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Items Outstanding
What Is Outstanding
Exit Health Assessment ID
Links to HLT-012 Assessment ID
Access Review ID
Links to SAF-147 Review ID
Turnover Reason Fed Into Retention Review*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Items Assessed*
Excludes anything marked N/A.
Items Failed*
Score Percent*
Calculated on submission. High is good. N/A items leave the denominator.
Result Band*
- Pass3 pts
- Caution1 pt
- Fail0 pts
Completeness Percent*
How much of the template was actually answered. A high score on a half completed form is not a high score.
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Line Manager*
Signature*
HR*
Second Signature*
OPS-042 · record IDs look like OFFB-2026-000 · Links Key Register, Access Review, Exit Health Assessment
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The checklist is straightforward. What slips is coordinating five owners on different clocks, and verifying that removals actually landed in the systems they were meant to.
Raises the checklist off the notice event, reverses the provisioning record item by item, and holds the outstanding count open until each entry has a named owner and a date.
Reconciles the closed checklist against the key and access device register and the periodic access review, so a removal recorded on paper cannot sit alongside a credential still live in the panel.
Judges the exit surveillance question from exposure history rather than job title, routes the assessment to occupational health at notice, and keeps health records on their own retention clock.
Watches every open offboarding record against its last working day, surfaces the ones with access items still unticked inside the window, and holds each write for approval before touching a record.
This template lives in KnowOps — frontline execution. Shift handover, production control, daily management, worker lifecycle and improvement.
Meet KnowOps→Glossary
Worker Offboarding Checklist definitions and key terms
- Offboarding
- The controlled closure of everything a departing worker holds — access, assets, knowledge and entitlements — evidenced as one record rather than as separate departmental actions.
- Immediate departure
- A departure with no controlled final day, typically dismissal or walkout, where access removal precedes asset return and handover instead of following them.
- Single point of failure
- A task, system or relationship only the leaver could perform or access, which becomes an operational risk the moment they go and must be identified before it does.
- Access review
- A periodic reconciliation of granted access against current workers, which acts as the detective backstop to offboarding rather than as a substitute for it.
- Retention class
- The category setting how long a record is kept and under which instrument, distinguishing personnel records from health surveillance records with far longer statutory lives.
FAQ
Frequently asked questions about worker offboarding checklist
When should the checklist be raised?+
On the day notice is given or served, in either direction. The scored question asking whether the checklist started at notice exists because every downstream item — cover, handover, exit surveillance, final pay — needs a runway. Raising it in the leaver's final week guarantees outstanding items.
Who should own it, HR or the line manager?+
HR owns the record and the sequence; the line manager owns the handover, the continuity assessment and the property in their area. Both signatures exist for that reason. Give it wholly to HR and you get clean access removal with a hollow handover; give it wholly to the manager and you get the reverse.
How does this relate to the provisioning record?+
It is the mirror image. The provisioning record lists what the worker was given and granted; offboarding reverses that list item by item. Where it was never completed, offboarding has no authoritative source and the outstanding count understates reality.
What if the worker refuses the exit conversation or the health assessment?+
Record it as offered and declined, with the reason where given. A decline is a legitimate outcome and does not become N/A. For health surveillance in particular, the offer being made and documented is the part that protects both parties if a claim arises later.
Should the checklist be closed with items still outstanding?+
Yes, provided the count is accurate, each item has a named owner, and an action record is raised. The alternative — leaving it open indefinitely — means access removal never gets confirmed and the record cannot be reported on.
Can the template be changed?+
Every field, option, score and conditional rule is editable, and the links to the key register, access review and exit health assessment travel with it. Most organisations add sector-specific return items to the property section and leave the access section alone.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Worker Onboarding and Offboarding
Worker Profile
Holds a record for each worker, including role, department, site and start date
Exit Health Assessment
Records a worker's health status when they leave a role with hazardous exposure
Key and Access Device Register
Holds every key, fob and access device, who has it and what it opens
Access Request Record
Requests and approves access for a person to an area or a system, with the justification and an end date
New Starter Pre-Arrival Checklist
Everything that must be complete before a new worker's first shift, covering right to work, references, medical clearance, competency evidence, equipment ordered and systems requested
New Starter First Day Record
Records what actually happened on a new worker's first day, from arrival through induction, introductions, equipment issue and their first supervised task
More in Worker Lifecycle
New Starter Pre-Arrival Checklist
Everything that must be complete before a new worker's first shift, covering right to work, references, medical clearance, competency evidence, equipment ordered and systems requested
New Starter First Day Record
Records what actually happened on a new worker's first day, from arrival through induction, introductions, equipment issue and their first supervised task
Worker Equipment and System Provisioning
Tracks what a worker was given and what access they were granted, from PPE and lockers through to systems and door access
Probation and Ninety Day Review
Reviews a new worker at the agreed points, covering competence, fit, support received and whether anything promised at hire actually happened
Worker Role Change Record
Records a worker moving to a different role, area, shift or site, and what has to change as a result
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- ISO/IEC 27001:2022 Annex A 5.11, 5.18 and 6.5 — return of assets, access rights, responsibilities after termination
- ISO/IEC 27001:2022 cl.6.1 and cl.9.1 — actions to address risks; monitoring and evaluation
- ISO 9001:2015 cl.7.1.6 — organisational knowledge
- 29 CFR 1910.1020 — access to employee exposure and medical records
- UK GDPR Art.5(1)(e) — storage limitation
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.