When an employee has an amicable departure, it may feel like there’s less urgency to execute offboarding actions, but it’s still general best practice to perform these steps in a timely manner. First, issue a “lock device” action [currently Apple only] until you’ve had a chance to review that all relevant data has been archived from the device. After the device has been locked, you should also suspend the user’s account in order prevent ongoing access to company data & revoke all current sign-in sessions in order to ensure that phones/personal devices are properly logged out. Once the device has been collected & any relevant data backed up, then issue the “wipe device” action. Note that the device needs an active internet connection to receive this command, so steps may need to be taken to connect it to the office network if it was normally used remotely. The security certificate used to securely communicate with the MDM server also has an expiration date, so it’s best to wipe devices as soon as feasible.