Security offboarding immediately revokes all access upon employee termination — disabling accounts, revoking certificates, returning equipment, and preserving evidence if termination is involuntary.
Immediate revocation is critical — angry ex-employees can cause significant damage. Disable AD account → revoke SSO/VPN → change shared credentials → collect equipment → preserve email/files. Do it on their last day, not days later.