True story. There is ALWAYS a CSSO & a Security Manager - MUST be two different people - essentially "read into everything" to act as access controls. If she's so special, who'd handle those files if she got killed by a MARTA bus? She may have been the only "analyst" read into the program(s) covering those files, but not the only one with access.
Anyone having access to said files, if they are codeword compartmented or classified, whoever got them for her now or for some outside source not only does so at their own peril in terms of prosecutions and potential imprisonment, but imperils GT/GTRI as well.
Treat it as a SAP - A potential solution to only allow access in a controlled security environment (SCIF, e.g.) with proper firewalled access and not on any personal computer.