[Coleman]

Originally Posted by Milla

Not a bad answer. This is what i put.

"If an employee is engaged online in downloading unauthorized information, and I am the system admin, the first thing I would do is to drop his connection to the internet, stopping him from accessing the internet, and stopping the download. Then I would block the site or application. I would then immediately check the files he has downloaded, and run system scans on the network and the computer to see if anything has been triggered, or if anything looks suspicious. For all I know the employee didn’t realize he was breaking policy , although I must not take any chances. I will then check everything for functionality to make sure everything is up and still running. Importantly, I will maintain proof, so the employee can be dealt with."

xoxoxo