Regardless, it should not be on her personal computer. I'm sure a lot of the cyber security regs have changed since I was in, but even then, there was a long and lengthy process to have a government computer accredited for classified info. I'm not sure if there even were any provisions for a personal computer to be accredited.
I had a key technical position with a global data company. I had to use a company issued laptop and couldn't:
- access any type of web mail
- un/install any software
- change security settings
- could not plug in any external memory devices
- and the hard drive was encrypted and wouldn't work without a wireless USB key that picked up new hash codes every few minutes.
And this wasn't classified national security intel - I just potentially had access to company plans and technical artifacts, maybe some personnel info.