# Event website access offboarding worksheet

Make one copy for each departing employee, contractor or agency contact. This is an operating record, not an instruction to delete the person’s account or records before the authorized cutoff. Coordinate timing and any preservation requirement with the appropriate owner. Do not put passwords, recovery codes, API keys or attendee data in this sheet.

| Decision | Record |
| --- | --- |
| Event edition and departure role | |
| Authorized access cutoff with time zone | |
| Requester and approver | |
| Coordinator and backup | |
| Business records and tasks to hand over | |
| Preservation or exception instruction and owner | |
| Status channel for urgent event issues | |
| Closeout approver and date | |

## Cross-system inventory

Fill a separate row for every distinct account or access path. A central sign-in, direct vendor login, shared secret and API token may need different actions.

| System / account | Event purpose | Person’s role and access path | New owner before cutoff | Removal or transfer action | Session / token / shared-secret review | Evidence and time | Verified by | Open exception / due |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| CMS and event pages | Publishing | | | | | | | |
| Domain registrar and DNS | Public name, mail | | | | | | | |
| Hosting, CDN and status page | Delivery | | | | | | | |
| Ticketing / registration | Orders and entry | | | | | | | |
| Payment provider | Charges, refunds, payouts | | | | | | | |
| Shared support inbox | Attendee help | | | | | | | |
| Marketing email and analytics | Campaigns, reports | | | | | | | |
| Code repository and deployment | Changes, releases | | | | | | | |
| Automation and integrations | Webhooks, API keys | | | | | | | |
| Other vendor portals | | | | | | | | |

## Cutoff and continuity record

| Checkpoint | Responsible person | Observed result and time | Follow-up |
| --- | --- | --- | --- |
| New owners accepted pending work | | | |
| Primary identity disabled or access removed as authorized | | | |
| Direct vendor roles and invitations reviewed | | | |
| Application sessions and tokens reviewed using provider controls | | | |
| Shared credentials and recovery channels assessed for rotation | | | |
| Event page, ticket path and support reply still work | | | |
| Exceptions assigned with due dates | | | |

Removing a person from an identity provider does not necessarily end sessions issued by each application. Recheck the provider’s actual behavior. Preserve business records through approved transfer and retention processes; do not assume account suspension or removal erases or transfers them.