An employee observes an outside individual putting some computer disks in her purse. the employee does not report this security breach. what security measures should have been in place to minimize this threat