Changes on project-managed applications or database should undergo the change control process as documented.
A scenario wherein the city or location where the building(s) reside is / are not accessible.
What would be the reference for you to know who should have access to data/document?
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.
An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.
