I work for a small UK company in the IT department.
Hearing other employees struggle with the slow internet connection I discover malicious software (trojan horse) in the Internet access point.
I had concerns that in the installation of Trojan Horse may be involved someone from technical management. Therefore I addressed the issue directly to the company owner also suggesting a non-invasive and silent audit of the internal network. I got permission from Company owner to conduct an examination.
Two months later I have been accused of a possible gross of misconduct addressed as Data Breach according to the ISO 27001 standard.
My concern is that the disciplinary investigation and hearing process which implied in The letter of termination (due to gross of misconduct) has a formality to achieve terminating of my employment in a disciplinary manner.
Till the moment of accusation, I had little if any knowledge of the company's ISO 27001.
Asking about details such as ISO 27001 appendix A where it states as follows
A.5.1 Information security policy Objective: To provide management direction and support for information security following business requirements and relevant laws and regulations.
A.5.1.1 Information security policy document
An information security policy document shall be approved by management, and published and communicated to all employees and relevant external parties.
I was told that I should have been aware of the policy as it is A daily Jira process.
My further concern is that ISO 27001 was used as a tool to conduct the process procedurally.
The investigation has finished with the letter of termination within three days notice period. I can make an appliance to the company owner within seven days.
What are the steps I can take in this situation?
That probably makes a strong case for constructive dismissal
My worry is Data Breach allegations leading to my dismissal. Fortunately, I had no access to production data in this company, but from previous experience, such access is sometimes necessary to carry on daily tasks.
I am concerned how this allegation may deface me in the eyes of my future employers.