32 controls · Public CSV · No signup

Prove that an MSP offboarding is actually complete.

Coordinate customer handoff, access revocation, agent removal, data disposition, residual exceptions, acceptance, and post-exit verification in one vendor-neutral evidence register.

Download the CSVRead the full checklistCISA MSP guidance

Authorize the exit

Record the approved end date, decision owners, scope, constraints, successor, service cutoff, and communication path before changing access or agents.

Transfer with evidence

Reconcile endpoints, accounts, vendors, licenses, documentation, backups, incidents, and open work. Name the authorized recipient and acceptance owner for each handoff.

Revoke every access path

Disable interactive, service, API, emergency, delegated, VPN, vault, cloud, and vendor-portal access. Revoke tokens and sessions, then verify removal from both sides.

Verify after cutoff

Track failed agent removals and retained data as exceptions, obtain customer acceptance, and monitor for unexpected authentication, check-ins, jobs, alerts, or data flows.