Construction and energy companies hire quickly and release crews just as quickly. A project ramps up, new foremen and laborers need email and a tablet by Monday, and six months later the work ends. In the shuffle, accounts stay active, devices disappear into trucks and homes, and former employees keep access to systems nobody remembers granting.
These gaps are rarely malicious. They are the natural result of a process that lives in someone's head. Writing it down protects the company and makes new hires productive faster.
Why the process matters
Every account is a door. Every device is a key. A former employee's still-active email account can be used to read project communications, and a lost tablet with saved passwords can expose your project platform. An overlooked contractor account can become the entry point for an attacker who guesses or buys the password.
Good onboarding also saves money. When someone starts with the right tools, supervisors spend less time chasing logins, and IT spends less time on after-the-fact fixes.
Onboarding checklist
Start from a request form submitted by the hiring manager at least a few days before the start date.
- Role and access template. Define what the employee needs: email, project platform, timekeeping, accounting, shared folders. Use a template for each role, not a copy of a coworker's access.
- Account creation. Create a named account. Never share logins. Enroll in multi-factor authentication before first use.
- Device assignment. Record the device, serial number, and who has it. Enable disk encryption, a screen lock, and device management so it can be located or wiped.
- Password manager. Provide a company password manager so crews are not storing passwords in notes apps or text messages.
- Basic training. Give a short orientation covering phishing, safe use of company devices, and who to call. Fifteen minutes with real examples beats a long policy document nobody reads.
- Acknowledgments. Have the employee sign an acceptable use policy and device agreement.
Field-specific considerations
Field workers may not have a company email or a desk. Decide how they access timekeeping, safety forms and schedules. If they use personal phones, set clear rules and consider app-level protection that separates company data from personal data.
Offboarding checklist
Offboarding needs a trigger, usually HR or the supervisor notifying IT the same day a person leaves or a project ends.
- Disable accounts the same day. Email, project platforms, accounting systems, VPN and remote access. Disable first, delete later after data is preserved.
- Revoke sessions and tokens. Sign the user out of all devices and change shared credentials they knew.
- Recover devices. Collect tablets, laptops, phones, badges and keys. If a device is not returned, remotely lock or wipe it.
- Preserve data. Transfer mailbox contents and files to a manager or archive. Set an autoreply or forward as policy allows.
- Remove from external systems. Owner portals, subcontractor sites, equipment telematics and cellular plans.
- Review licenses. Recover paid seats so you stop paying for unused software.
- Record completion. Note who finished each step and when.
Handle subcontractors and temporary labor separately
Contractors and staffing agency workers often receive access outside the normal HR process. Require that the project manager who requests access also owns its removal, and set an expiration date on every temporary account at creation.
Common mistakes
- Waiting for a monthly cleanup instead of acting at departure.
- Leaving shared accounts in place after a crew leaves.
- Failing to collect phones and tablets from short-term hires.
- Forgetting vendor portals and cloud applications that do not connect to your main directory.
Making it stick
Assign one owner for the process, keep the forms simple, and review a sample of recent departures each quarter. If your systems support it, connect your identity provider to major applications so one disable action cuts off many systems.
Ironfield Cyber manages onboarding and offboarding for clients as part of our help desk service and can help you build the forms, templates and approvals that fit how your crews actually work.