icky feeling
Last year we had an external auditing firm help us conduct a review of our computer security. I did some script writing to automate and simplify parts of this. One of the consultants asked for help on some scripts that it turned out were for another client. (The first cut of the scripts had a few commands that didn't exist in our flavor of Unix.) To the extent that the scripts were useful for us too, I provided some help. And I let management know what was going on.
The same firm is back now, doing a follow-up review. Mostly the same staff are back. And apparently this same consultant has asked someone else here for help with something for another client. So my boss has asked me for my log entries and any email about the earlier incident. My log entries about all sorts of things are generally quite good, and it turns out I kept the consultant's emailed requests and my replies.
I guess the consultant is in for a reprimand, or worse. It will be obvious where the old email is from, although conceivably someone else could have pulled the messages off a server without my help. (Except in my case, my email doesn't stay on the corporate server. But the consultant might not know that.) I don't generally like getting other people in trouble. But I guess I wasn't the one making inappropriate requests.