What should you do if a security policy violation involves a criminal offense?  Include the Fourth Amendment in your discussion.

What will be an ideal response?

If the security policy violation is a criminal offense, law enforcement officials must be notified and the investigation is turned over to them.  In this situation, you need to be aware of some pitfalls. After an investigation is turned over to the police, the U.S. Constitution's Fourth Amendment protections for search and seizure apply. Your responsibilities as administrator change when public entities such as police and government become involved and company information becomes evidence. You face a tremendous burden of liability if you assist the police without being served with a subpoena or search warrant. A subpoena is a court order demanding that a person appear in court or produce some form of evidence. A subpoena specifies what evidence is required, such as personal testimony, paper documents, or data files from the suspect's computer. A search warrant is similar to a subpoena, in that it is issued by a court and compels you to cooperate with law enforcement officers. It also describes the location to be searched and specifies the evidence that officers are allowed to take.