Analyst fired - why is he still clicking into stuff on our drive??

Thanks for the suggestions. I've emailed my VP about this earlier, but didn't get any insight from her on this

Are you at a boutique or something? Why does your fired analyst still have his computer? 

He has gone rogue… your files are in great danger…

You snitch

So, I think the biggest problem is that from a compliance perspective he can theoretically leak info or edit documents if he is angered at being fired. I can tell you that emotions are probably high for him and he likely feels anger or resentment. On the flip side and most likely, he is likely trying to prep for interviews now that he is unemployed. He likely didn’t update his resume so he is trying to download or look at information to help with recruitment. Taking photos of pitches or other information that he will forget in 1-2 months so that he can sound coherent on what he did. Either way, he should not be doing this and can get in trouble as it’s the same situation as some random person guessing a password and getting into a file or something. Contact IT and flag it as high priority so they can quickly fix it. If you use a shared CapIQ or other account, maybe change password? Otherwise his account is likely paid out for the end of the month or something.

Create new accouns he does not have access to

Yeah I’d suggest that you speak with your IT team .. 

That's weird - there's lots of reasons to do that and none of it good. He's a spy!

Your IT guy should be able to remotely terminate all access to the drive. When we had layoffs I left my laptop and badge on my desk. Was allowed to grab my bag and walk myself out but that was it. Did you guys just fire him while he was working remote?

If it is on a Share Drive, you can log into the Microsoft Office Share File online and limit access to people if you have controlling access or creator access to the file or folders. Don't know how IT set it up but in Security tab under preferences and settings when you right click on a document you can also do this. I would talk to IT they should of ended access to the VPN at least and his log in credentials and then hopefully you have all your files only accessible via VPN. If not there are bigger issues. 

They're supposed to have their access restricted for security reasons, with the idea being that while they do technically work there, they have no business purpose for accessing the docs.

This is semi-automated . . i.e. someone might need to flip a switch, but any sizable bank would have the permissions automatically revoked once that flip is switched.

If they still have access, then it means either: (i) your firm doesn't want a blanket rule because maybe there's a situation where someone on leave is needed to access docs or (ii) more likely, someone made a decision at your firm that it wasn't a priority to be A+ in security processes and some people will slip through the cracks.  In which case you should ask compliance if there is generally a rule to shut down access, and they can get it done for you.