As a system administrator, if you were asked to facilitate access to your users' file store so that a director could look at what types of files are being stored, what would your response be?
The director is argueing that the data stored on the network belongs to the company, but I argue that this file store (i.e. "My Documents") has previously been declared as "not for business use", and we do have a policy allowing personal use of computers, subject to a number of restrictions of course.
There are concerns that business data may be being stored under "My Documents", but does this justify allowing a director to go looking? It has been stressed by the director that this is for nothing more than identifying business data being stored in the wrong location, however I'm just a little uneasy about allowing access to what I think should really be "personal file store".