p
If this was being done the right way, and it isn’t, she signed documentation prior to getting a cac card so she could access the email system they are talking about. It is part of the WW web and is used by branches of the military and other government organizations.
To sign the documentation, and have it entered, she would have had to go through a class in the hands of an IT instructor designated to teach and authorize the completion of the class and the opportunity to get signed up by a comm unit, with fingerprint, to gain access. The class also instructs, besides the physical operaion of the system, OPSEC and COMSEC requirements that also define the charges and possible sentences of violation.
Anyone that had access, did this. And the password changes frequently and has to be accomplished by the user and verified by the system to complete it. She could not have gained access without a criminal act to do so or a criminal act to continue its use without security checks which they would not have done as it is not a secure server.
rwood