Let me remind you of another thing you said in your testimony. You said that employees were “asked if they had borrowed the hard drive”. It doesn't seem like a very strict protocol to me, if it's possible for employees just to borrow a hard drive with the personal information of over half a million Canadians.
Would you agree?