CSAM in search history of a user at work.

Hi 😕.

I work for a small MSP (5 of us, I'm the most senior under the owner, but most decisions are made by him).

Today, I remoted in to a PC. I saw in the chrome history searches for CSAM overnight. It looks like chrome had been signed into a non work Gmail as well, and was syncing the history. The history was full of similar stuff. It's important to note that it was mainly searches etc, and very little evidence of the user actually having found what he was looking for. I was very thrown and escalated it to my CEO. After a bit, he got back to me and said it's none of our business and to ignore it and move on.

Any advice? It does not sit right with me as unfortunately I know a few people that where abused as kids so it's personal to me to ensure pedophiles are punished. However I'm not sure where to go from here? Im pretty sure that if I go the police I would get fired, and anyways the evidence will be long gone by then.