A forensic investigation of digital evidence is frequently employed as a post-event response to a serious information security incident. In fact, there are numerous circumstances where an organization may benefit from an ability to gather and preserve digital evidence before an incident occurs. As an IT security auditor, you have found that an employee within a company has crossed the line of ethical standards and have breached all company policies at a financial institution with illegal transactions. Explain how you would address the following:

1. Decide whether the offense is historical or on-going.
2. What steps should be taken as to disciplining the employee or terminating the employee.
3. Address parallel issues of governmental involvement, shareholder derivative suits, and any