I have a hard time telling what this person rolled in the knife situation. Awareness may have been like a 2. Intimidation could have either been a 2 or a 19. I mean the person had 0 idea why they had a knife, nor was considered a threat to let them leave first… or after. For all we know dude robbed the whole store, asked everyone if they had a problem staying silent and dudes just fucking munching out on a cookie. If they switch to doughnuts they could have been a 90s cop.
How this should be negotiated in any company. No employee can be held liable for any security breaches that ever take place, and we cannot be insured as NO ONE can/should ever know another user’s credentials. If you are keeping track of keystrokes, you are recording every username and password…