There'd be no steps for me. I'd tar up the directory, delete it, lock the account, and explain why later.