Systems and methods for managing security during a divestiture

A system for managing asset security during divestiture of assets and employees by a divesting entity, comprising:

• a microprocessor coupled to memory, the microprocessor being programmed for:
• differentiating divested assets of which ownership is transferred from the divesting entity to a buying entity during divestiture and divested employees whose employment is transferred from the divesting entity to the buying entity during divestiture from non-divested assets and employees, wherein differentiating the divested employees further comprises grouping divested employees into an active directory group of divested employees on a human resources database of the divesting entity;
• identifying non-divested assets which divested employees are permitted to access;
• locking down divested employee access to the non-divested assets which divested employees are not permitted to access, wherein locking down divested employee access to the non-divested assets further comprises deploying a divestiture proxy server between divested employees and non-divested assets;
• and
• deploying a separation firewall between divested networks of which ownership is transferred to a buying entity during divestiture and non-divested networks and between buying entity networks and the non-divested networks.

A method for managing security during divestiture of assets and employees by a divesting entity, comprising:

• differentiating divested assets and employees from non-divested assets and employees;
• identifying non-divested assets which divested employees are permitted to access;
• locking down divested employee access to the non-divested assets which divested employees are not permitted to access;
• deploying a separation firewall between divested networks and non-divested networks and between buying entity networks and the non-divested networks;
• and
• providing temporary connectivity between the divested networks and the non-divested networks via the separation firewall during a first predetermined period and between the buying entity networks and the non-divested networks via the separation firewall during a second predetermined period, logging traffic between the divested networks and the non-divested networks via a separation firewall access logger during the first predetermined period and between the buying entity networks and the non-divested networks via the separation firewall access logger during the second predetermined period, and terminating connectivity between the divested networks and the non-divested networks via the separation firewall upon expiration of the first predetermined period and between the buying entity networks and the non-divested networks via the separation firewall upon expiration of the second predetermined period.