When your best salesperson hands in their resignation, your first thought is usually about client relationships and renewals. But there's a quiet threat hiding in your systems that most agencies completely overlook — and it could be costing you more than you realize.
markdown formatted blog content
Let's be honest — when someone gives notice, your brain goes into crisis mode. Who's following them? Which clients are at risk? Is next quarter's pipeline suddenly looking anemic?
Those are legitimate concerns. But here's what probably isn't crossing your mind: that person still has access to everything.
Your agency management system holds years of client relationships, renewal schedules, carrier connections, and communication history. That data doesn't pack up and leave with your departing producer. It just... sits there. Waiting. Accessible.
And if you're not careful, it stays accessible way longer than it should.
I came across this number recently and couldn't shake it: roughly 25% of employees still have access to their former employer's systems and files after they've left. Let that sink in for a second.
In an insurance agency, this isn't some abstract cybersecurity statistic. We're talking about client records, carrier portal access, renewal data — the actual lifeblood of your business — potentially sitting open for weeks or months after someone's started working for a competitor.
The worst part? Most agencies have no idea this is happening.
Here's my theory on why this keeps getting overlooked: offboarding feels like a sad task. Someone you trusted is leaving. You don't want to treat them like a threat. You want to be professional, even gracious.
So you do the bare minimum — collect the laptop, cancel the email, say goodbye. That checks the emotional boxes without feeling hostile.
But here's the uncomfortable truth: this isn't about distrust. It's about building systems that protect your business regardless of how someone's departure unfolds. Whether they left on fantastic terms, burned every bridge, or anything in between — your offboarding process should be solid either way.
Most agencies have some version of an offboarding checklist. Most of them look like this:
That's not a checklist. That's a wish and a prayer.
Here's what a real offboarding process looks like:
Step 1: Cut AMS access before you cut it entirely
On day one of notice, scope down their access immediately. They should still be able to wrap up active items, but they shouldn't have visibility into the full book of business. Reducing access in stages protects you while allowing a reasonable transition.
Step 2: Audit every carrier portal
This is the step everyone skips. If your producer had independent login credentials for any carrier portal — and many do — those need to change. Shared logins need rotation. Individual access needs termination. Write this down as a non-negotiable step.
Step 3: Check. Email. Rules.
I cannot stress this enough. It takes thirty seconds to set up a rule that forwards every incoming email somewhere else. Before you disable an account, check what rules exist. Every. Single. Time.
Step 4: Document physical and digital assets
Laptops, phones, access cards, carrier credentials stored anywhere outside your AMS — get all of it back and note exactly what you recovered. Think of it as a chain-of-custody process because honestly, that's what it is.
Step 5: Wipe business data from personal devices
If your team has been using personal phones or laptops for work (and let's be real, they probably have), your acceptable use policy should allow you to remotely wipe business information. This is why keeping personal and company devices separate from the start is so important.
Step 6: Last day = complete revocation
On their final day, revoke everything. Access to systems, applications, shared drives — gone. Collect all company assets. Make it clean.
Here's where I have good news: this doesn't have to be a manual nightmare.
Endpoint management tools like Microsoft Intune let you configure devices properly from the start. When someone resigns, revoking their access takes minutes, not hours. Everything happens consistently, every time.
And here's a bonus most people don't think about: automated offboarding actually helps knowledge transfer. When you lock someone out of their device, the files and documents on that machine remain accessible to the rest of the team. So instead of losing all that institutional knowledge the moment someone walks out the door, you preserve continuity for clients and colleagues who need it.
That's a huge win.
Compare that to manual offboarding, which is slow, error-prone, and depends on whoever's doing it remembering every single step. Spoiler: they won't.
While we're on the subject — client communication matters too. Build a list of every client and carrier the departing producer was working with, and reach out before they have a chance to reach out first.
A message from agency leadership that introduces the new point of contact, affirms continuity of service, and handles the transition professionally does a lot more than you might think. Clients who hear from you first are significantly more likely to stay.
And for the love of everything, update your AMS. Reassign accounts with detailed notes so whoever picks up that work has context from day one, not weeks of detective work.
The agencies that handle departures smoothly share one thing: they built their offboarding process before they needed it.
Don't wait for a resignation to realize your checklist is missing steps. Put these systems in place now, when emotions aren't running high, so when that envelope lands on your desk — and it will, eventually — you're ready.
Because the data sitting in your systems right now? It's more vulnerable than you probably realize.
Time to do something about that.
Tags: ['insurance agency', 'it security', 'offboarding', 'data protection', 'business continuity']