When users leave or personnel changes take place in your organization, ensure that only individuals who currently need access to your tools have that access.
Any employees who have left the company or no longer need access should have their access revoked so attackers cannot use these inactive accounts to gain entry to your customers’ environments.