News

Staff Joining or Leaving? 7 Steps to Manage Accounts and Access Safely

Every organisation has people joining, changing roles and moving on. Each change touches your systems: email accounts, shared folders, Wi-Fi, accounting software, door access and sometimes physical keys. When these changes are handled in a hurry, former staff can keep access long after they leave, and new staff can wait days before they are able to work. A simple, repeatable process avoids both problems. Here are seven practical steps for Bhutanese offices, schools and businesses.

1. Keep a list of every system that needs an account

Start by writing down everything a staff member may be given: business email, file sharing, internal software, the office network and Wi-Fi, printers, CCTV or gate controllers, social media pages, and any online portals your organisation uses. You cannot remove access you do not know about, so this list is the foundation of everything else.

2. Give access based on the role, not the person

Decide in advance what each role needs. An accounts assistant may need the finance system but not the server room; a front-desk officer may need the booking system but not payroll files. Giving only what the role requires keeps sensitive information safer and makes later changes much easier.

3. Use individual accounts instead of shared logins

Shared passwords such as one “admin” login for everyone are convenient, but when someone leaves, the password must be changed for all users, and it is impossible to know who did what. Individual accounts let you disable one person without disturbing the rest of the team.

4. Prepare a joining checklist

When a new staff member starts, work through the same checklist each time: create accounts from the role template, issue any ID or access card, set up the computer, and explain basic security habits such as strong passwords and how to recognise suspicious emails. A checklist means nothing important depends on someone’s memory.

5. Review access when roles change

Promotions and transfers are easy to overlook. Someone who moves from finance to administration may still have finance access months later. Whenever a role changes, add what is needed for the new role and remove what belonged to the old one.

6. Follow a leaving checklist on the last working day

When someone leaves, disable their accounts promptly rather than waiting weeks. Change any shared passwords they knew, collect laptops, access cards and keys, and update door or gate access lists. Before closing an email account, arrange for important messages and files to be handed over to a colleague so that nothing is lost.

7. Check the full list regularly

Every few months, compare your list of active accounts against your current staff list. Remove accounts that nobody uses and confirm that administrator rights are held only by those who genuinely need them. A short regular review often catches forgotten accounts before they become a risk.

Make it part of your routine

Managing staff access is less about expensive tools and more about having a clear process and following it every time. Once your list, role templates and checklists are in place, joining and leaving become quick, predictable tasks rather than last-minute worries.

Need help setting this up?

eDruk Private Limited, a Bhutanese software company established in 2004, can help you review your systems, organise user accounts and access, and plan secure networks and software that are easier to manage. Talk to our team:

• Email: edruk@edruk.com.bt
• Phone: +975 2 332277
• Website: https://www.edruk.com.bt

News

Keeping Your Website Healthy: 7 Regular Checks for Bhutanese Organisations

For many organisations in Bhutan, the website is the first place people go to check opening hours, read announcements, download forms or find a phone number. Yet once a site is launched, it is easy to forget about it until something breaks. A short routine of regular checks keeps your website accurate, secure and useful. Here are seven checks any office, school, hotel or business can build into its calendar.

1. Make sure it actually loads

Open your website on a computer and on a phone every week, ideally using both Wi-Fi and mobile data. Slow pages, error messages or a blank screen are easy to miss if nobody looks. If visitors cannot reach your site, they will usually assume you are closed or out of date rather than tell you.

2. Keep the content current

Old notices, expired job vacancies, past events and outdated contact numbers quietly damage trust. Assign one person to review key pages each month: the home page, contact details, services, prices you publish yourself and any announcements. Remove or archive what no longer applies.

3. Apply updates to the platform and plugins

Content management systems such as WordPress, and the themes and plugins added to them, receive regular updates that fix bugs and security weaknesses. Leaving them unpatched is one of the most common ways websites get compromised. Schedule updates, test the site afterwards, and remove plugins you no longer use.

4. Check your domain and security certificate

Know when your domain name and hosting renew, and who receives the renewal reminders. Confirm that your site opens with https and a padlock in the browser. An expired domain or certificate can take a site offline or show visitors an alarming warning page, even when nothing else is wrong.

5. Review user accounts and passwords

Look at who has administrator access to your website. Staff who have left, temporary accounts created for a vendor, or shared logins should be removed or changed. Use strong, unique passwords and turn on two-step verification wherever your platform supports it.

6. Keep a backup you can restore

Make sure the website files and database are backed up automatically and stored somewhere separate from the live server. A backup only counts if it works, so occasionally confirm that it can be restored. This turns a hacked or broken site from a crisis into an inconvenience.

7. Watch forms, comments and messages

Submit your own contact form now and then to confirm messages still arrive in the right inbox. If your site accepts comments, moderate them regularly: delete spam, and respond to genuine questions promptly. An unanswered enquiry is a lost opportunity, and a page full of spam links looks abandoned.

Make it a habit, not a project

None of these checks takes long on its own. Put them on a simple monthly checklist, name who is responsible for each one, and keep a short log of what was done. Small, regular attention prevents most of the problems that lead to emergency fixes.

How eDruk can help

Since 2004, eDruk Private Limited has been designing and developing websites, web applications and software for organisations in Bhutan. If you would like help reviewing your website, setting up updates and backups, or planning a new site, our team is happy to talk it through with you.

Email edruk@edruk.com.bt, call +975 2 332277, or visit www.edruk.com.bt.

News

From Paper Files to Digital Records: 7 Steps for Bhutanese Offices

Many Bhutanese offices, schools and businesses still run important work on paper: leave forms, stock registers, applications, receipts and client files kept in folders and cupboards. Paper works until someone needs a record quickly, a file goes missing, or two branches need the same information on the same day. Moving to digital records does not have to mean replacing everything at once. A careful, step-by-step approach keeps daily work running while the new system takes shape.

1. Start with one process, not the whole office

Pick a single process that causes the most delay or repeated effort, such as leave requests, purchase approvals or customer enquiries. Map how it works today: who fills in the form, who checks it, who signs it and where it is filed. A short, honest map shows where time is lost and what the digital version really needs to do.

2. Decide what information you actually need

Old forms often carry fields nobody uses any more. Before building anything, agree on the information that must be captured, which fields are required, and who is allowed to see or change each record. This keeps the new system simple for staff and avoids collecting personal details you do not need.

3. Choose between scanning, re-entering, or starting fresh

Not every old file needs the same treatment. Some records only need to be scanned and stored so they can be found later. Others, such as active client or stock records, are more useful when their details are entered into a proper database so they can be searched and reported on. For very old archives, it may be enough to start fresh from a set date and keep the paper files for reference.

4. Plan who can access what

Digital records are easier to share, which also means they are easier to share with the wrong person. Set up user accounts with roles, so each person sees only what their job requires. Keep a record of who created or changed important entries. This is more control than most paper cupboards ever offered.

5. Back up from the first day

Once records live on a computer or server, a failed disk or a mistaken deletion can undo months of work. Arrange automatic backups before staff start relying on the system, keep at least one copy away from the main office, and test that you can actually restore a file.

6. Run paper and digital side by side for a short time

For the first few weeks, let the new system and the old paper process run together. Staff can compare results, report confusing screens and suggest small changes. Set a clear date when the paper version stops, so the transition does not drag on indefinitely.

7. Train people and keep listening

A system is only as good as the people using it every day. Give short, practical training to each group of users, write a one-page guide for common tasks, and name someone staff can ask for help. Small improvements made in the first months often decide whether a digital system is welcomed or worked around.

Where eDruk can help

eDruk Private Limited has worked in Bhutan’s software sector since 2004. We help organisations plan their move from paper, build web and mobile systems that fit the way they work, and set up the networks, backups and support that keep those systems running.

If your team is ready to turn a paper process into a digital one, talk to us. Email edruk@edruk.com.bt, call +975 2 332277, or visit www.edruk.com.bt.