Getting Rid of Staff With High Access?
HikingStick writes "I've been in the tech field for over 15 years. After more than nine years with the same company, I've been asked to step in and establish an IT department for a regional manufacturing firm. I approached my company early, providing four weeks notice (including a week of pre-scheduled [and pre-approved] vacation time). I have a number of projects to complete, and had planned to document some of the obscure bits of knowledge I've gleaned over the past nine years for the benefit of my peers, so I figured that would give me plenty of time. That was on a Friday. The following Monday, word came down from above that all of my privileged access was to be removed — immediately. So, here I sit, stripped of power with weeks ahead of me. From discussions with my peers in other companies, I know that cutting off high-privilege users is common, but usually in conjunction with a severance offer (to keep their hands off the network during those final weeks, especially if there is any ill-will). Should I argue for restored access, highlight the fact that I am currently a human paperweight, request a severance package, or simply become the most prolific Slashdot poster over the next few weeks? Does your company have a policy/process for dealing with high-privilege users who give notice? What is it, and do you make exceptions?"
It's in the company's interest for you to do nothing. They actually will prefer if you do absolutely nothing because of their own liability. As a regular employee, if you mess something up it's just negligence (oops). On the other hand if the company terminates you and still gives you access, and then you mess something up, they're criminally liable because they should have restricted your access.
For example, I worked on banking software and had god-rights. If I as a regular employee steal all of the customer data and sell it, then I am the criminal. If I have been terminated and do the same, then they are at fault. Now yes, I realize that it's a pedantic difference, but the banks which run the software see a world of difference and will sue the my employer accordingly.
Believe me, it's cheaper to pay me 6 months severance than it is to be sued for my actions.
I remember when I was 18 and knew everything. Every seasoned interviewer knows that the reference it check is not the immediate past or current employer but 2 or more back. The current employer has an incentive to lie if they are getting rid of a bad employee. To the original poster - do your job as best you can and live with the decision. Try and pass along any undocumented knowledge to good employees that will use it correctly.
Is that by convention or by law? In the US employment is voluntary. You don't HAVE to give any notice at all, but it's considered professional to do so.