Your Club’s Board Changed. Who Still Has the Keys?

Imagine this September handover: the incoming treasurer receives the budget spreadsheet, the outgoing board member returns a key, and everyone considers the transition complete. A week later, a password reset goes to a personal inbox nobody on the current board controls.

This is an illustrative scenario, but the question is practical: has responsibility actually transferred, or have you only exchanged files? A swim club board handover should finish with working access, clear ownership, reachable records, and assigned unfinished work. The incoming officer needs to perform the role independently, while the outgoing officer’s access should reflect whatever responsibilities they still hold.

Use the following workflow to turn that expectation into a handover your club can verify. It is designed for a board transition, but you can adapt it for a new manager, a departing bookkeeper, or the end of a seasonal staffing assignment. Start with one role if a whole-club review feels too large.

1The keys your next board might never receive

A physical key has an obvious destination. Digital responsibility needs a more deliberate inventory. Ask the outgoing officer to walk through an ordinary week and identify every system, document, approval, and outside contact involved. Then walk through an unusual week: a disputed invoice, an urgent closure, a missing renewal notice, or a request the officer cannot resolve alone.

List the club platform, email, website, domain registration, shared documents, payment services, accounting tools, and communication channels that the role actually uses. Add physical records and devices where relevant. Include services that renew annually, even when the outgoing person rarely opens them. A subscription invoice or a calendar reminder can help identify something that did not appear in the first conversation.

The security principle is straightforward. NIST recommends restricting access to people who need it for their work and removing access when responsibilities change or employment ends. That is a useful basis for reviewing rotating club roles, without assuming that every volunteer needs the same permissions. See NIST’s access and authentication guidance.

For each inventory entry, name the person who owns the decision, the person who performs the work, and the person who can approve an access change. These may be different people. “The board” is too broad to help when a renewal notice needs an answer on Tuesday.

2Build a handover register someone else can check

Keep a single working register with one row per responsibility or system. Use links to the approved records, rather than copying private member details into the register. The table below contains suggested examples, not records from an actual club.

Add a status that distinguishes “requested,” “ready to check,” and “verified.” An invitation sent to an incoming officer belongs in the first category until the officer has accepted it and confirmed the required access. A folder shared during the meeting belongs in the second category until the new owner has opened the right files.

Do not put passwords, recovery codes, payment-card details, or sensitive member information in this register. Record where the authorized process is documented and who can carry it out. Treat the register itself as an internal operational document with appropriate access.

3Agree on the job before assigning the permissions

Start with responsibilities in ordinary language. For a treasurer, that might mean reviewing invoices, reconciling payments, preparing the board’s financial report, and requesting approval for an adjustment. For a membership chair, it might mean reviewing applications, correcting household information, and escalating eligibility questions.

Next, translate each responsibility into the actions the person needs: view, create, edit, approve, export, or administer. Avoid treating those actions as interchangeable. Someone who prepares a report does not automatically need authority to change the underlying settings. Someone who answers a billing question does not automatically need authority to issue every kind of adjustment.

Write down the boundaries as well as the allowed actions. Identify which decisions require another officer’s approval, which records the role should not access, and which tasks belong to an outside provider. Use your club’s actual governing documents and approval arrangements when making those choices; this checklist does not establish authority that the club has not granted.

Then check the account against that description. If the available permission settings cannot express the intended boundary, record the limitation and an approved operating procedure. Do not quietly grant full administrative access just to make the checklist turn green. The unresolved difference is information the board needs.

4Transfer access in an order that keeps the club working

For a routine, planned transition, choose a transfer time and identify an authorized administrator who can help if something fails. Confirm the incoming owner can use their own account before concluding the handover. Schedule the outgoing person’s access change around their actual final responsibilities, with a clear end point.

This sequence assumes an ordinary transition with no concern about misuse. If access must be removed immediately, follow the club’s incident or urgent access-removal procedure instead. Do not extend inappropriate access solely to finish a convenient handover meeting.

Five checks for a planned transfer

1

Approve the role

Record the responsibilities, permission boundaries, and effective date before making changes.

2

Prepare the incoming account

Use the person’s own identity and complete the service’s normal invitation and authentication process.

3

Verify routine work

Ask the incoming owner to locate records and demonstrate representative tasks within the approved scope.

4

Change the outgoing access

Remove or narrow permissions that no longer belong to the person’s current role.

5

Check the result

Confirm both the incoming access and the outgoing account’s remaining scope, then record who verified them.

A departing board member may remain a club member. Review those relationships separately. Keeping access to their own household account does not require keeping board administration privileges. Likewise, a volunteer who agrees to answer occasional questions does not necessarily need continuing access to all records.

5Check account recovery, not just the successful login

A successful login is only one part of the exercise. Ask how the next authorized officer would regain access if their device were lost, their authentication method stopped working, or the main administrator were unavailable. Follow each provider’s documented recovery and ownership-transfer process.

NIST describes multifactor authentication as requiring more than one type of identity evidence and recommends enabling it on accounts that offer it. Its guidance also distinguishes phishing-resistant options from more vulnerable methods. Review the actual options offered by each service, particularly for administrative accounts. NIST explains the available authentication approaches.

For the handover, record who is authorized to manage recovery and how that responsibility will transfer next time. Keep recovery material in the club’s approved secure location, separate from the general handover document. Where a provider allows additional authorized administrators, decide who should hold that responsibility and verify their access individually.

Do not turn this check into an improvised account takeover exercise. You do not need to trigger destructive resets or share another person’s credentials to demonstrate preparedness. A documented provider procedure, current authorized contacts, and a controlled check of the available settings can identify unfinished work without disrupting the club.

6Move the work without creating another pile of member data

Ask the outgoing officer where they stored working copies: approved shared folders, local downloads, email attachments, paper notes, or a device used for club business. The purpose is to identify what the incoming owner needs and what the club must handle under its retention and security procedures.

The FTC’s business guidance recommends identifying the personal information an organization holds, limiting it to what is needed, protecting retained information, and disposing of unnecessary information appropriately. It also calls attention to information held outside obvious central systems. Read the FTC’s guide to protecting personal information.

Apply that approach by transferring approved records to the location the club has designated, then checking that the incoming owner can reach them. A handover is not a reason to email a complete membership export to every incoming board member. Share the record or report needed for the person’s assigned work.

Do not delete records simply because they look old. Confirm the applicable retention instructions and any requirement to preserve particular material before disposing of anything. If the club has no clear answer for a category of records, assign the question to an appropriate authorized adviser and mark that item unresolved. Keep the handover moving on the items that can be verified.

7Give unfinished decisions an owner and a next step

Access alone will not explain why a refund is waiting, why a family received an exception, or why a vendor renewal needs discussion. Build a short open-work list alongside the access register. For each item, capture the situation, the source record, what has already been decided, the next action, the owner, and any real deadline.

Separate an approved decision from a proposal. “We discussed extending the guest allowance” is different from “The board approved the new allowance effective next season.” Link to the actual approval record where one exists. If approval is unclear, label it as a question to resolve rather than turning someone’s recollection into club policy.

Use concise notes that let the next person act. “Vendor issue” provides little direction. “Confirm whether the September renewal includes website maintenance; compare the renewal notice with the current agreement before the stated response date” identifies a task, evidence, and decision point.

For broader planning, pair this handover with the PoolPulse end-of-season debrief guide . Use the debrief to choose operational improvements and the handover to assign continuing ownership. Keep completed decisions, open questions, and future ideas visibly distinct so the next board does not have to reconstruct their status.

8A realistic treasurer transition, step by step

Illustrative scenario

Morgan hands over to Riley

Consider a fictional club where Morgan is leaving the treasurer role and Riley is taking over. Morgan will remain a member and has agreed to answer questions for two weeks. The club has three unfinished finance items: a payment reconciliation, a proposed refund, and an upcoming accounting-service renewal.

Before the transfer, the club’s authorized approver records Riley’s responsibilities. Riley needs to review the relevant financial records and prepare reports. The proposed refund still requires the club’s existing approval process. Morgan’s offer to answer questions does not create a new approval role or an automatic extension of administrative access.

During the meeting, Riley signs in with their own account and finds the current reconciliation records. Morgan explains the outstanding difference and links the supporting transaction records, without placing private payment details in the meeting notes. Riley then identifies the next check and the person who will review the result.

The refund moves into the open-work list as “awaiting approval,” with the source record and responsible approver. The accounting-service renewal gets a named owner and its actual response date. Neither item is marked complete just because Morgan has explained it.

Finally, the authorized administrator changes Morgan’s finance access to match their remaining role. The club verifies Riley’s working access and Morgan’s member access separately. Questions during the two-week support period go through the approved contact, with limited information shared as needed. The support period finishes with a check of any remaining tasks, not an assumption that everything resolved itself.

9Use three ordinary tasks to expose an incomplete handover

Choose tasks that resemble the role’s real work. Use approved test records or legitimate read-only checks wherever possible. Do not make unnecessary changes to a member account, issue a real refund, or send a member message merely to prove that a button works.

Find the current rule

Ask the incoming owner to locate a current policy, identify when it takes effect, and find the approval or responsible owner. A correct file name is not enough if three conflicting versions appear. Record which copy is authoritative and where obsolete working drafts should be handled.

Explain a recent decision

Select an appropriate authorized record and ask the incoming owner to explain the decision trail: what happened, who approved it, and what still needs attention. If the explanation depends on the outgoing officer’s memory, add the missing operational context to the approved record.

Complete the next step

Have the incoming owner identify one open item and explain how they will move it forward. Check that the required permission, document, contact, and approval route are available. If one is missing, record the exact gap rather than simply noting “more training needed.”

After each task, ask what was unexpectedly difficult to find. The answer can distinguish a missing permission from a confusing document location or an unclear policy. Assign a correction that matches the actual problem, then repeat only the failed part of the check.

10What if the outgoing officer is already unavailable?

Begin with the club’s authorized leadership and the records it controls. Identify which responsibilities are blocked, which services are involved, and whether another authorized administrator can complete the transfer. Use official provider support and recovery procedures for accounts that cannot be accessed normally.

Separate urgent operating needs from background cleanup. A payment approval due today may require a different response from reorganizing last season’s committee folder. Give each blocked item a responsible person and a next contact, while keeping a record of the evidence needed to establish the club’s authority with the provider.

Do not ask staff to impersonate the outgoing person or guess their credentials. Do not assume that a personal email account becomes club property because it received club messages. Work through the service’s legitimate ownership and access processes, and obtain appropriate advice where ownership is disputed.

After access is restored, document the recovery path and review why the responsibility depended on one unavailable person. That review should produce a specific improvement, such as a verified additional administrator or a clearer ownership record. Avoid declaring the entire transition complete while important records or approvals remain inaccessible.

11Make seasonal access a separate review

At season end, review staff and volunteer accounts by current assignment. Identify who has finished, who still has approved closing work, and who has a continuing year-round responsibility. Do not use possible employment next summer as the sole reason to leave this season’s access unchanged.

For each continuing assignment, record the work and its expected end point. Someone helping with inventory may need a different scope from someone preparing financial records. When the remaining work is complete, have the authorized person review the account again.

For returning staff, make next season’s access a fresh approval based on the role they will actually perform. Include any changes to responsibilities, systems, or club policies in their onboarding. A familiar name on the roster should not substitute for a current access decision.

Keep this review connected to the board handover so the incoming team knows which seasonal exceptions remain open. A brief list of approved continuing assignments is more useful than a vague assurance that “staff access has been handled.”

12Tell the right people where the responsibility moved

Prepare a short communication plan for the transition. Identify who needs the new contact information: relevant staff, other officers, outside service providers, and members where appropriate. Explain the effective date and the channel to use for questions. Share only the details each audience needs.

For example, a member-facing notice might introduce the incoming membership chair and confirm the established club email address. It should not expose the internal account inventory or explain another volunteer’s permission settings. An internal note to the finance team may need the new approval contact and a reminder about an outstanding deadline.

Review forms, instructions, shared documents, and recurring messages that still direct work to the departing person. Have the incoming owner check a representative path from the reader’s perspective: find the contact, open the form or approved channel, and identify who will receive the request. Use a controlled internal check rather than sending a misleading message to members.

Record any contact update that depends on an outside provider. Give it an owner and follow-up date, just as you would an access request. The handover should tell the incoming officer where requests will arrive and which channels still need attention.

13Review the first month without reopening every decision

Set a short follow-up after the incoming officer has completed a normal cycle of work. Ask which tasks still required help, which records were difficult to locate, and whether any unexpected access remained. Bring the existing register so the conversation can close known gaps and add specific new findings.

Distinguish an incomplete transfer from a new improvement idea. A missing account invitation belongs in the handover work. A proposal to replace the accounting service belongs in the club’s normal decision process. Keeping those categories separate gives the transition a visible finish while preserving useful suggestions for later.

Once the verified handover is complete, identify who maintains the role’s instructions during the year. Ask that person to update them when responsibilities, approval routes, or service contacts change. The next transition can then start from the current working record instead of rebuilding it from old meeting notes.

14Ask your software to demonstrate the boundary

PoolPulse’s Users / Staff & Role Management describes controls for viewing, editing, approving, and exporting information, along with seasonal account disabling and activity history. Use those documented capabilities as a starting point for a walkthrough of your actual roles.

Bring a role description and ask to see both sides of its boundary: a task the person should complete and an action they should not be allowed to take. Ask how the club can review a change later and what happens when the person leaves a staff or board role while remaining a member.

Keep the distinction between the club platform and separate services explicit. A change in PoolPulse should not be assumed to transfer ownership of an unrelated email account, website subscription, or payment-provider account. Put those services on their own handover rows and confirm their individual procedures.

If your walkthrough reveals a gap between the available controls and the club’s intended process, document it before making a decision. A useful evaluation ends with a clear understanding of what is supported, what needs configuration, and what still requires an external process.

15Finish with evidence the next board can use

Close the transition by reviewing the register with the incoming owner and an authorized reviewer. Check that the main responsibilities have named owners, access matches those responsibilities, current records are reachable, and unfinished items have next actions.

Your final handover check

• The incoming owner has demonstrated the agreed routine tasks using their own account.
• The outgoing person’s access has been reviewed against their remaining responsibilities.
• Recovery contacts, provider contacts, and important renewal notices have identified owners.
• Open decisions and unresolved access gaps have a responsible person and a review date.
• Club records and equipment have been transferred through the approved process.
• The next access review has an owner, including any remaining seasonal assignments.

Record what remains incomplete plainly. A handover can make substantial progress while still having a blocked provider transfer or an unresolved policy question. The important point is that the incoming board can see those gaps and knows who is responsible for resolving them.

Preparing for a board change or next season’s staffing? Bring one board role and one seasonal role to a PoolPulse walkthrough . Use the same tasks from your handover to evaluate how access, records, and everyday responsibilities fit together.