Could a former employee or old vendor still log into my business systems?

Review active accounts, shared credentials, API keys, vendor access, and administrator groups against current employees and contracts. Disable access that no longer has a business owner and rotate shared secrets that former users may know.