This is a fascinating story, Carlton. Fascinating that a major retailer could possess an LP entity and still allow for all that to happen. And I agree with all above - the P in LP stands for Prevention. As in, all the technology and reporting tools they've mentioned.
But, if you were to rate levels of employee theft skills 1-5 (with 5 being high), I'd give her a ~1.
And if I had to rate the CVS LP crew in her store/region/corp, I would give them a similar grade...
I'm sure that low level employees might sometimes point out, especially in off-handed conversations with each other, some of the more obvious flaws in their stores LP set-up that could allow 'someone' to swipe a candy bar or lipstick on occasion - they are there alot and have eyes.
It's the craftier-thinking ones (notice I did not use the term 'more intelligent') who see these obvious flaws and then, over time, push the envelope further and further, leveraging anything learned over that time for more $$ - until the store simply can't ignore the escalated behavior. A kindergartener might know that they could steal a nickel or a dime off daddy's dresser without him noticing, but if they snag the whole money clip daddy's got to notice. I mean duh.
It sounds as if, at least in 2004 in that particular area, CVS employed 'none of the above' in reference to all of the technologies mentioned by previous posters in this string.
They finally were forced to open an investigation (and probably installed covert cameras on her register specifically) which showed all of the above-mentioned behaviors. I'm surprised everyone in the store wasn't fired once they realized how easy it was to do all that she was doing.
...or maybe they already knew?