I need a help with my scenario question below on the course

ACCCES CONTROL DEFENCE METHOD

Employees at a law firm stole the organization's files and deleted emails. Insiders of that firm stole sensitive files for personal gain and with a clear purpose. After their malicious actions, the attorneys double-erased all the emails that could have provided evidence. What security mecanisms can be used to ensure accountability? For information security purposes, list the nominal details that need to be captured as well as important considerations