If she is an asset and was close enough to gain physical access to his phone or main computer, that's pretty much the ballgame. CEOs often don't want their devices being on company MDMs, that's for the underlings.