A secure operating system can track who accessed which files and printed out copies.
Hopefully, the backup tapes were grabbed too so that we can discover who wrote the memo and when.
I understand that part .. I meant, someone could have made a copy of the hard copy memo that was rec'd/sent
How can they track that?