many people don't comprehend the security implications of remote work. The potential damage from a malicious insider cannot be understated. Unfortunately, people who just found out they lost their job turn malicious.

Email opened - wait X minutes - cut all network access. Is usually the workflow.

The email usually contains next step actions and is the last communication given before network access is cut. There really is no other way to do this for remote workers.