إلغاء الصلاحيات والأمان

Access revocation is one of the five fixed exit stages, not just a task category, so it gets its own tracked progress rather than getting lost among unrelated tasks.

What to track: email, internal systems, cloud storage, physical access (badges, keys), and VPN/remote access, each as its own task assigned to IT.

Timing: revoke immediately on notice if your policy requires it, or schedule for the last working day, either way the task and its due offset make the timing explicit rather than assumed.