Vendor Offboarding and Exit Checklist

An editable 14-page exit pack for ending a vendor relationship safely. Every step names its goal, the actions, the common mistake to avoid, and the evidence that closes it.

What’s inside

• A readiness page capturing vendor, business owner, TPRM analyst, effective exit date, risk tier, exit trigger, replacement approach and contract reference
• An eight-step workflow from exit decision and contract read-out through notice, transition, access revocation and data deletion to financial close-out and lessons
• Thirteen questions to answer before serving notice, plus an editable termination notice and a data deletion certificate covering production, backups and sub-processors
• A seven-action access revocation log with IT sign-off, and an eight-artifact exit pack tracker
• Evidence and reviewer checklists, a red-flag table with the required action and owner, lessons learned, and the final exit approval block

High and Critical exits carry extra gates and the pack marks each one: CISO or CRO sign-off on the decision memo, a rollback path before any cutover, a signed deletion certificate within 30 days of the effective date, and a Risk Office signature on the final approval.