Short article from CIO.com, “IT Director Pleads Guilty to Deleting Organ Donation Records”, is another reminder that it doesn’t matter where the IT person is located, they could be located in your office, down the street or at the other side of the world, and still be capable of doing something to your data. Need to have a process in place, especially when terminating someone to shut down all access, but as well to periodically monitor for all access points for “unusual” activity.