As a security administrator, if you believe that suspicious activity may be taking place, explain at what point you become concerned about the chain of custody for potential evidence.?

• As a security administrator, if you believe that suspicious activity may be taking place, explain at what point you become concerned about the chain of custody for potential evidence.?

   As an employee, you receive an email that was misdirected. The content of the email implies that the sender of the email is involved in criminal behavior involving your company. Explain how you would you go about communicating this email, and to whom you would report to.?