He was found out in a security audit. I imagine that allowing access to the company's systems is something that requires extensive vetting beforehand, given it

He was found out in a security audit. I imagine that allowing access to the company's systems is something that requires extensive vetting beforehand, given it's described as "critical infrastructure".