The real question here is the basics of cyber security, or lack of in this case, perhaps one of the following should be implemented
Role Based Access Control or RBAC (for Dave)
Discretionary Access Control or DAC (for Dave)
Mandatory Access Control or MAC (for Dave)
Not to mention import/export controls for all classified material, its a disaster
