A former company I was at was really weirdly tight-lipped about people leaving.
I'm sure totally unrelatedly, we got dinged a bunch on our SOC2 reports improper "off-boarding" and not removing access from terminated folks since no one knew to remove them.
Once we added quarterly SOC2 controls to make sure only employees had accounts it was always a shock to see who had to be removed.
I know the intent was to improve morale, but it had the opposite effect.
I've had companies use privacy concerns as an excuse, which was hilarious. They couldn't tell us who left because they wanted to respect the laid-off people's privacy so the entire company spent the day compiling a list of all the deactivated Slack accounts. Great job!
I'm sure totally unrelatedly, we got dinged a bunch on our SOC2 reports improper "off-boarding" and not removing access from terminated folks since no one knew to remove them.
Once we added quarterly SOC2 controls to make sure only employees had accounts it was always a shock to see who had to be removed.
I know the intent was to improve morale, but it had the opposite effect.