Someone could have noticed, through basic audit controls, that this person had made these changes to the system.

We have found that people sometimes do not understand the relevance of security to their job or the role they play in making company security effective. Everyone needs to understand how to protect information, both company information and customer information.