Offboard vendors cleanly and retain records for seven years

Vendor Management policy, §5.7, §12

When a relationship ends, the vendor’s access is revoked, confidential information is retrieved or destroyed with certification, obligations are settled, and the termination is recorded. Vendor records, including diligence files, contracts, reviews, and issues, are kept for seven years from the end of the relationship.

Event-driven

At each termination; retention runs seven years from it

Run the offboarding checklist, obtain the data destruction certificate, mark the vendor terminated in the inventory, and key its record retention to the termination date.

• Offboarding checklist

  Access revoked, data returned or destroyed with certificate, obligations settled

• Retention schedule entry

  Record class, period keyed to termination, location

Compliance Officer

Leela can run the offboarding checklist and hold the file with its retention date.

Tell Leela about your company to see whether this applies.