She was pretty flustered and said that it was actually her work computer, so I don't think she could take me there to see it.
So why is it HER problem? She should call IT. And management should fire IT for incompetence as they obviously didn't secure the network properly.
You can't secure a network against human stupidity. IT most likely has no fault. People will open every attachment they get sent, especially on their work emails and if the emails look work related(a complaint, an order, etc.).