An internal auditor is auditing their organization’s termination process. A primary objective of this engagement is to verify that exit interviews were conducted for all terminated employees over the last two years. The auditor discovered that not all employees received exit interviews. Which of the following risks could this lead to?
Exit interviews often cover important topics such as the return of company property, non-disclosure agreements, and other confidentiality matters. Without these interviews, there is a higher risk that departing employees might inadvertently or intentionally disclose sensitive information.
Exit interviews typically seek to uncover why the employee left, such as problems with management, lack of resources, lack of career growth, lack of recognition or reward. Failing to monitor this may result in increased turnover from other employees with the same views. Question relates more to employee motivation than data security.