Why wasn’t there security on the device? My works devices are password protected and it’s a disciplinary offence if I share passwords or give unauthorized access.
If he gave them the login creds, then he should be penalised .
If he logged in and gave the device to non parliamentary staff, he should also be penalised.
He got caught because it cost money, which is the lesser offence. Cyber security should be more robust for ministers than it is for most companies, but seemingly not.