As others have pointed out:

He physically FedExed his RSA [security] token to China so that the third-party contractor could log-in under his credentials during the workday.

This is probably the worst security violation a standard employee can commit.