What do you do?

You are working as Computer Forensics investigator and are called by the owner of an accounting firm to investigate possible computer abuse by one of the firm’s employees. You meet with the owner of the firm and discover that the company has never published a policy stating that they reserve the right to inspect their computing assets at will .

What do you do?
A . Inform the owner that conducting an investigation without a policy is not a problem because the company is privately owned
B . Inform the owner that conducting an investigation without a policy is a violation of the 4th amendment
C . Inform the owner that conducting an investigation without a policy is a violation of the employee’s expectation of privacy
D . Inform the owner that conducting an investigation without a policy is not a problem because a policy is only necessary for government agencies

Answer: C