Skip to main content

Office Closure IT Checklist

This checklist provides verification criteria for IT activities when closing a permanent office location. Each item specifies the verification method, pass criteria, and evidence to retain for audit purposes.

Prerequisites

Complete these requirements before beginning closure activities:

RequirementDetail
Closure decisionFormal approval documented with target closure date
TimelineMinimum 30 days for planned closure; emergency closure uses Data Evacuation playbook
Staff listComplete roster of staff assigned to closing office
Asset inventoryCurrent inventory of IT equipment at location
Service contractsList of location-specific vendor contracts and service agreements
Destination planConfirmed disposition for each asset category (transfer, dispose, store)

Pre-Closure Preparation

Complete 30 to 14 days before closure date.

ItemVerification methodPass criteriaEvidence
Staff relocation plan confirmedReview HR relocation documentEach staff member has confirmed destination (transfer office, remote work, departure)Signed relocation plan
Equipment destination matrix completedReview disposition spreadsheetEvery asset assigned to: transfer to specific office, ship to staff home, return to HQ, dispose, or donateCompleted matrix with approvals
Data audit completedReview data inventoryAll locally stored data identified with classification and retention requirementData inventory spreadsheet
Backup verificationTest restore of local server dataCritical data restored successfully from backup within RTORestore test log with timestamps
Vendor notification list preparedReview contract listAll location-specific contracts identified with termination notice requirementsContract summary with notice periods
Packing materials procuredPhysical inspectionSufficient anti-static bags, padded boxes, and labels for equipment countProcurement receipt
Destination offices notifiedEmail confirmationReceiving offices confirmed capacity and readiness datesEmail acknowledgments
Staff communication sentReview sent communicationsAll affected staff notified of IT procedures and timelinesCommunication copy with distribution list

Data Handling

Complete 14 to 7 days before closure date.

ItemVerification methodPass criteriaEvidence
Cloud synchronisation verifiedCheck sync status in platformAll designated local files synchronised to cloud storage with verification completeSync completion report
Local file server data migratedCompare source and destinationFile count and size match; spot check confirms file integrityMigration log with hash verification
Database backups completedVerify backup in central repositoryFull backup completed within 48 hours; backup verified restorableBackup job log with verification
Email archives completedCheck archive statusAll mailboxes archived per retention policy; archives accessible from destinationArchive completion confirmation
Shared drive permissions documentedExport permission reportPermissions exported before migration for referencePermission export file
Personal device data removedMDM compliance checkOrganisation data removed from any BYOD devices remaining at locationMDM wipe confirmation per device
Printed document handling completedPhysical verificationConfidential documents shredded; retention documents boxed with manifestShredding certificate; box manifest
Local application data exportedVerify exportsData from local applications exported in portable formatExport files with verification

Data classification

Handle data according to classification level. Confidential and restricted data requires witnessed destruction or encrypted transfer. Public and internal data may use standard secure disposal.

Equipment Disposition

Complete 7 to 3 days before closure date.

ItemVerification methodPass criteriaEvidence
Asset inventory reconciledPhysical count against inventoryAll assets physically located; discrepancies documented and investigatedSigned inventory reconciliation
Hard drives wiped or removedVerify wipe certificate or physical removalNIST 800-88 compliant wipe completed, or drives physically removed for destructionWipe certificates per drive; drive removal log
Device data wipedMDM verification or manual checkFactory reset completed; MDM enrollment removed; no organisation data presentWipe confirmation per device
Laptops prepared for transferPhysical inspection and boot testDevice boots to login screen; asset tag matches destination; packed securelyPacking checklist signed
Desktops prepared for transferPhysical inspectionDevice labelled with destination; peripherals bundled; packed securelyPacking checklist signed
Network equipment preparedPhysical inspection and config backupConfiguration backed up; device factory reset; labelled with destination or disposalConfig backup file; reset confirmation
Printers and peripherals processedPhysical inspectionConsumables removed; device reset; storage cleared if applicableProcessing checklist
Mobile devices collectedPhysical count against MDMAll organisation-owned mobile devices collected; count matches MDM inventoryDevice collection log
Servers decommissionedVerify shutdown and data handlingVMs migrated or backed up; physical servers wiped; chassis prepared per destinationDecommission checklist per server
UPS batteries handledVerify safe removalBatteries removed safely; recycling arranged with certified vendorBattery manifest; recycling receipt
Shipping arrangedVerify shipping bookingsShipments booked for all transfer equipment; insurance confirmed for items over specified thresholdShipping confirmations

Equipment Disposition Decision Reference

Asset conditionUnder 3 years old3 to 5 years oldOver 5 years old
Fully functionalTransfer to office with needTransfer or donateDonate or dispose
Minor issuesTransfer with repair noteDonate or disposeDispose
Non-functionalDisposeDisposeDispose
LeasedReturn to lessor per contractReturn to lessor per contractReturn to lessor per contract

Network and Connectivity

Complete 7 to 1 days before closure date.

ItemVerification methodPass criteriaEvidence
ISP termination scheduledConfirmation from providerTermination date confirmed within 7 days of closure; final bill estimate receivedProvider confirmation email
Static IP addresses releasedProvider confirmationAll static IPs released or transferred; DNS updatedIP release confirmation
DNS records updatedDNS lookup verificationA records removed or redirected; MX records unaffected; PTR records removedDNS audit log
VPN configuration removedCheck VPN platformSite-to-site VPN tunnels removed; client VPN references to office removedVPN configuration export showing removal
Firewall rules archived and removedConfiguration export and deletionOffice-specific rules exported for reference; rules removed from central firewallRule export; change ticket
SD-WAN node decommissionedPlatform verificationEdge device removed from SD-WAN platform; policies updatedPlatform screenshot showing removal
WiFi infrastructure removedPhysical verificationAccess points removed; controller configuration updatedAP removal log; controller audit
Network switches decommissionedPhysical verification and config backupConfiguration backed up; switches factory reset or prepared per dispositionConfig backups; reset confirmation
Telephone numbers ported or cancelledProvider confirmationNumbers ported to destination office or redirected; unused numbers cancelledPorting completion; cancellation confirmation
VOIP configuration removedPlatform verificationExtensions removed or reassigned; auto-attendant updated; voicemail migratedPlatform audit showing changes

Access Revocation

Complete on closure date.

ItemVerification methodPass criteriaEvidence
Physical access credentials revokedAccess control system auditAll badges, PINs, and biometric enrollments for location disabledAccess system export showing disabled credentials
Office-specific groups updatedDirectory auditLocation-specific groups archived or membership updated; no orphaned referencesGroup membership before/after
Conditional access policies updatedPolicy auditLocation-based policies removed or updated; no policies reference closed officePolicy export showing changes
Printer access removedPrint server auditLocation printers removed from print server; user printer mappings clearedPrint queue list; GPO update
Location-specific application access revokedApplication auditAccess to location-specific systems revoked for users who have not transferredApplication access log
Guest WiFi SSID disabledWireless controllerGuest network for location disabled or removedController configuration
Service accounts reviewedDirectory queryService accounts specific to location disabled or ownership transferredService account audit

Staff transfers

Staff transferring to other offices retain their core access. Update location attributes in identity provider but do not revoke application access unless role changes. Coordinate with User Offboarding only for departing staff.

Vendor Notification

Complete per contract notice requirements, minimum 14 days before closure.

ItemVerification methodPass criteriaEvidence
ISP contract terminatedWritten confirmationNotice provided per contract terms; termination date confirmed; early termination fees identified if applicableTermination confirmation
Telephone provider notifiedWritten confirmationService termination or transfer scheduled; porting requests submittedProvider confirmation
Equipment lease returns scheduledLessor confirmationReturn shipping arranged; return authorisation received; condition documentation completeRMA numbers; condition photos
Maintenance contracts terminatedWritten confirmationLocation removed from maintenance coverage; refund calculated for prepaid periodsContract amendment or termination
Security monitoring cancelledProvider confirmationAlarm monitoring cancelled; access codes deactivated; equipment return arranged if leasedCancellation confirmation
Copier/printer lease terminatedWritten confirmationReturn scheduled; metre readings submitted; final billing confirmedLease termination; final metre reading
Cleaning and facilities notifiedWritten confirmationService termination aligned with lease end; final service scheduledService termination confirmation
Managed service provider notifiedWritten confirmationLocation removed from scope; pricing adjusted; SLAs updatedContract amendment

Vendor Notification Timeline Reference

Contract typeMinimum noticeItems to confirm
Telecommunications30 daysNumber porting lead time; early termination fees
Internet service30 daysStatic IP release; equipment return
Equipment leasesPer contract, commonly 30 to 90 daysReturn shipping; condition requirements; buyout option
Maintenance agreements30 daysCoverage end date; prepaid refund
Managed servicesPer contract, commonly 30 to 90 daysScope reduction; data handback

Documentation

Complete before closure date.

ItemVerification methodPass criteriaEvidence
Network documentation archivedRepository checkNetwork diagrams, IP allocations, and configuration archived in central repositoryRepository location reference
Asset disposal records filedRecords auditDisposal certificates, donation receipts, and transfer manifests filed per retention policyFiling confirmation with retention date
Vendor correspondence archivedEmail/document checkContract terminations, confirmations, and final invoices archivedArchive location reference
Data handling records completedRecords auditData migration logs, wipe certificates, and destruction certificates compiledRecords package location
Lessons learned documentedDocument reviewIssues encountered and resolutions documented for future closuresLessons learned document
Final cost reconciliationFinance confirmationAll closure-related costs tracked; variances from budget documentedCost summary approved by finance
Handover to facilities completedSigned handoverIT-related handover items documented; landlord requirements confirmed completeSigned handover checklist

Final Verification

Complete on or immediately after closure date.

ItemVerification methodPass criteriaEvidence
Physical space clearedFinal walkthroughNo IT equipment remaining; all cables removed or capped; patch panels clearedWalkthrough checklist with photos
Remote access verified disabledConnection attemptVPN and remote access to location-specific resources fails appropriatelyTest log showing connection failures
Monitoring alerts clearedMonitoring platformNo active alerts for decommissioned equipment; monitoring removedPlatform screenshot
DNS propagation verifiedExternal DNS lookupRecords updated across public DNS; no references to old IPsDNS lookup results
Asset inventory finalisedInventory systemAll assets show correct status (transferred, disposed, stored); location field clearedFinal inventory report
Finance notifiedEmail confirmationAsset changes communicated for fixed asset register updateFinance acknowledgment
Closure report completedDocument reviewSummary report documents timeline, issues, costs, and lessons learnedCompleted closure report
+------------------------------------------------------------------+
| CLOSURE VERIFICATION FLOW |
+------------------------------------------------------------------+
| |
| 1. VALIDATION |
| +-------------------+ |
| | All categories | |
| | complete? | |
| +--------+----------+ |
| | |
| +-----+-----+ |
| | | |
| YES NO |
| | | |
| v v |
| +----------+ +---------------------------+ |
| | Final | | Document exceptions | |
| | sign-off | | and seek approvals | |
| +----------+ +-------------+-------------+ |
| | |
| v |
| +-------------+-------------+ |
| | Exception approved? | |
| +-------------+-------------+ |
| | |
| +-----+-----+ |
| | | |
| YES NO |
| | | |
| v v |
| +-----------+ +-----------------------+ |
| | Proceed | | Resolve blocking | |
| | with | | item before | |
| | closure | | proceeding | |
| +-----------+ +-----------------------+ |
| |
+------------------------------------------------------------------+

Figure 1: Closure verification and exception handling flow

Exit Criteria

The office closure is complete when all of the following conditions are met:

CriterionVerification
All checklist items pass or have documented approved exceptionsChecklist review with signatures
No IT equipment remains at locationFinal walkthrough confirmation
All data migrated, archived, or securely destroyedData handling evidence package complete
All location-specific access revokedAccess audit shows no active credentials
All vendor contracts terminated or transferredVendor confirmation package complete
Asset inventory updated to reflect dispositionInventory system reconciled
Closure report accepted by IT managementSigned acceptance

Exception Handling

Items that cannot be completed require documented exceptions with compensating controls.

Exception request requirements:

  • Description of the item that cannot be completed
  • Reason completion is not possible
  • Risk assessment of proceeding without completion
  • Proposed compensating control or remediation plan
  • Target date for resolution if deferral
  • Approval from IT manager and, for security items, security lead

Common exception scenarios:

ScenarioCompensating controlApproval level
Equipment cannot be locatedFile loss report; update asset register; conduct broader search before write-offIT manager
Lease termination fee prohibitiveDocument cost; seek finance approval for fee or negotiate buyoutIT manager and finance
Data migration incomplete due to timelineExtend cloud access for location; schedule completion within 30 daysIT manager
Vendor non-responsiveDocument contact attempts; proceed with service termination; escalate contract dispute if neededIT manager
Physical access to premises lostCoordinate with facilities/landlord; document constraint; complete remotely where possibleIT manager

Blocking exceptions:

The following items cannot proceed with exceptions and must be resolved before closure sign-off:

  • Hard drive sanitisation or destruction (data protection requirement)
  • Staff access revocation for departing employees (security requirement)
  • Critical data backup verification (business continuity requirement)

See also