Yeah my dad's worked cybersecurity for thirty years now and every company he's ever worked at, as soon as you put in your two weeks, your access is removed and you're off the job. You still get paid for those two weeks of course but you can't really steal anything after that point. Cause if someone quits a good cybersecurity job it's most likely to be to go work for a competitor. Of course it's a little bit dumb cause if they wanted to steal data they just wouldn't put in their two weeks, but it's standard practice, or so I thought. I'm surprised to learn that's not the case at all tech companies lol
In most jurisdictions you can‘t legally prevent a person from working for a competitor. You can only keep paying them for not doing so, however they‘re free to cancel that agreement if they want to.
In my current employment contract it says I am restricted from working with competitors of the company for 3 months after my contract is terminated, though I always wondered how enforceable this was.
In first world countries you're typically working for 2-3 months before quitting (this goes in both directions btw), so obviously you won't lose your access unless there's some sort of conflict involved.
It's a weird policy because, as you said, it's dumb. You're preventing them from doing something they could have done the day before giving their notice while stopping them from working to make a smooth handover to their successor.
Like, sure, remove their production DB access and whatnot, but static data that the person could have used before their notice is weird to cut off access to.
22
u/Lightningtow123 9d ago
Yeah my dad's worked cybersecurity for thirty years now and every company he's ever worked at, as soon as you put in your two weeks, your access is removed and you're off the job. You still get paid for those two weeks of course but you can't really steal anything after that point. Cause if someone quits a good cybersecurity job it's most likely to be to go work for a competitor. Of course it's a little bit dumb cause if they wanted to steal data they just wouldn't put in their two weeks, but it's standard practice, or so I thought. I'm surprised to learn that's not the case at all tech companies lol