HR Dismissal & Document Fraud

Bank IT Employee used administrative access to acquire their HR performance review.  Retained to provide methodology and chronology of how the file was acquired, the password crack, and the evidence deleted.  Based on the findings, the employee was subsequently fired without recourse.