Page 149 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 149

range from calm, understanding acceptance to violent, destructive
               rage. A sensible procedure for handling terminations must be designed

               and implemented to reduce incidents.

               The termination of an employee should be handled in a private and
               respectful manner. However, this does not mean that precautions
               should not be taken. Terminations should take place with at least one
               witness, preferably a higher-level manager and/or a security guard.
               Once the employee has been informed of their release, they should be

               escorted off the premises and not allowed to return to their work area
               without an escort for any reason. Before the employee is released, all
               organization-specific identification, access, or security badges as well
               as cards, keys, and access tokens should be collected (Figure 2.3).
               Generally, the best time to terminate an employee is at the end of their
               shift midweek. An early to midweek termination provides the ex-
               employee with time to file for unemployment and/or start looking for
               new employment before the weekend. Also, end-of-shift terminations

               allow the worker to leave with other employees in a more natural
               departure, thus reducing stress.






























               FIGURE 2.3 Ex-employees must return all company property

               When possible, an exit interview should be performed. However, this
               typically depends on the mental state of the employee upon release
               and numerous other factors. If an exit interview is unfeasible
   144   145   146   147   148   149   150   151   152   153   154