If he can be compared with the compliance officers I spoke to with our EthiQs team, he had just identified every data vulnerability in the organisation and trained all employees with an online AVG module. He had stopped all leaks and minimised document printing. The USB sticks had ended up in the wastepaper basket (securely destroyed and discarded in an environmentally way, I mean). He had everything covered.
Until corona hit and an impossible situation soon got out of hand.