Josh is a new supervisor at a mental health facility. He discovers that Charlotte, one of his employees, has shared her password with a coworker. This action violates policies and procedures and is the first occasion of difficulty with this employee. Disciplinary action should be taken by: