Digital Incident - First Responder Service
Introduction
The initial response to an incident – the golden hour – can make or break a subsequent investigation. Ill informed playing with suspect computer systems can destroy any reliable evidence and inappropriate conversations with suspects can jeopardise the success of an interview.
As each and every business relies on computers and other digital systems ranging from humble web-based email through to complex server arrays, smartphones and memory sticks it is unfortunate but inevitable that these systems will be involved in anti-social or even criminal behaviour in the workplace.This behaviour can range from the theft of data, cyber bullying, accessing inappropriate web sites through to fraud and denial of service attacks against a company’s infrastructure. A large proportion of these incidents will not need the involvement of law enforcement agencies and many organisations prefer to deal with such cases in-house, away from the glare of publicity.
Most incidents will result in the dismissal of an employee and/or the possible use of civil actions to prevent further damage to a business. Even so sufficient evidence, of the right quality, will need to be gathered to present to those making decisions or possibly produced during an employment tribunal. But how should an organisation react when faced with such an incident? How should they act to preserve important evidence for subsequent use by investigators? What if the incident involves IT staff that have detailed knowledge of complex systems? How it works ?
As a pre-cursor to our Investigation Management Service the Digital Incident First Response Service provides clients with support in the immediate post-incident period, crucial for the preservation of evidence and the success of subsequent investigations. Advice can be obtained via telephone or where practical by scene attendance by experienced digital forensic examiners. All work undertaken adheres to the current ACPO Good Practice Guide for Computer-Based Electronic Evidence.
By working with the team at Incoming Thought you will receive good quality investigation leadership and support that will help you achieve your objectives.
Follow-on services after an Investigation
After the investigation has been completed the team at Incoming Thought would be delighted to work with you further across other areas of your risk portfolio. Typically this would consist of a range of practical and useful services ranging from consultancy engagement to address particular risk issues through to training and awareness for executives and staff. All of these services can be customised to meet local objectives.
