Incident Report

From: the Software Manager

Date/time of incident: 20 July, 17:55

Details of incident

An R&D employee, Adam, sent out confidential product data which we have put a lot of effort into to a competitor of ours. Adam was one of the main researchers in the project, which means he had the authorization to access the data in detail. Moreover, Adam was aware of the expiration date of our anti-virus software. We planned to update the current anti-virus software package in July. Adam brought his USB, with a virus, to the office and used it to shut down our firewall, letting him transfer the data before the new anti-virus software could be installed.

Assessment

The whole incident has been verified by my department. We have taken legal action against Adam. During the investigation conducted by the police, he admitted to committing the crime and taking money from our competitor.

Action taken

I’ve already checked our firewall and anti-virus software. To prevent this from happening again, I have set up 3 rules. The first one is that the anti-virus software will be regularly updated. Another measure adopted is that an alert will be triggered whenever the firewall fails. The third one is that no kind of storage device will be allowed in our office.