Users with Full permission to Incident Track are presented with an 'Edit company information' link on the Basic Information tab. I believe that the purpose is to allow users to enter required information for claim forms, but sites are a section of the platform that only Administrators usually have access to. In comparison, if a user does not have Employee Management permission and uses the Incident Editor, they will be unable to submit a claim until someone with the necessary permissions has entered or updated the employee with the required information.
Suggest to restrict editing site information to administrators