”I left the office at half past five and spent the evening at a dinner party across town. Somebody used my account – I have never even sat at PC-07.”
Evidence #1 · IT INCIDENT REPORT
”PC-07 is my desk, yes. I stayed late fixing a bug and left just after eleven. I logged off properly – I'd never touch Nadia's account.”
Evidence #2 · DOOR LOG
| Time | Badge | Direction |
|---|---|---|
| 17:30 | N. Berg | Out |
| 18:10 | I. Holm | Out |
| 23:02 | F. Moreau | Out |
| 23:20 | L. Quint | In |
| 23:58 | T. Shaw | Out |
| 00:35 | L. Quint | Out |
”Only one person here can open somebody else's account without the password. I gave him those rights myself when he started.”
Evidence #3 · ACCESS RIGHTS
| Person | Role | Admin rights |
|---|---|---|
| Nadia Berg | CEO | No |
| Toby Shaw | IT admin | Yes |
| Felix Moreau | Developer | No |
| Ingrid Holm | Office manager | No |
| Lara Quint | Cleaner | No |
”At about a quarter to twelve I saw someone at the window desk on the second floor, typing in the dark. I thought it was just one of the developers working late.”
Evidence #4 · CLEANING ROUND
| Time | Floor |
|---|---|
| 23:20 | Ground floor – kitchen |
| 23:40 | 2nd floor – desks |
| 00:10 | 1st floor – meeting rooms |
”I left around half past ten and was home playing games online by eleven. Felix was the last one in – it's his computer, isn't it?”
Evidence #5 · PRINTER TRAY
”I talk to lots of developers – that's business. I was on stage at a conference in Berlin that night, so I couldn't have been in Copenhagen.”
Evidence #6 · CONFERENCE PROGRAMME