When a staff member leaves you must remember to delete their user, or they could access the system without your knowledge.