@seachanger I'm very confused about "nothing can be done". In my country if a non-employee comes into a federal building's restricted area and starts touching the computers, they'll at the very least be escorted out, forcefully if they refuse. If they remotely log into systems that only federal employees should be able to, they'd be charged with cyber security crimes. There's a process for even contractors to be officially inducted into the system, and anyone can verify who passed through it.