With any investigation, I would hope there is a certain level of probable cause before authorities start threatening jail time. You leave a lot of details out

With any investigation, I would hope there is a certain level of probable cause before authorities start threatening jail time. You leave a lot of details out of your example. Such as, where you low level developer or a financial officer responsible for the company finances? If you were the latter, there would be ample suspicion to think a locked USB stick in your drawer would be useful evidence in the case. If you were a low level developer, probably not so much. You have to build context to determine if someone should be considered suspicious.