How using forensics can help protect your organisation’s digital assets

How using forensics can help protect your organisation’s digital assets; and what is the right thing to do when you encounter the following scenarios?

Scenario 1:

A senior employee has announced their resignation and is moving to a competitor. Allegations arise surrounding the theft of sensitive organisation data by this employee.

There are a several ways in which digital data can be transferred out of an organisation including USB memory devices, email, or cloud-based file hosting services.

  • Do you have any policies in place to avoid former employees stealing confidential data?
  • Did you know our team can forensically track the movement of data through a multitude of digital devices?

Scenario 2:

Your organisation has a high turnover of staff and the devices are often recycled back into the organisation.

  • Are you aware that resetting the device does not wipe the data?
  • What process does your organisation utilise to securely recycle or decommission the devices?
  • What GDPR security obligations do you have when recycling devices?
  • Have you considered a forensic analysis of the device to understand an employee’s activities before leaving the organisation; and whether any information has been stolen or leaked?

Scenario 3:

An employee has allegedly viewed or downloaded pornographic material on their work device.

  • Did you know you can utilise digital forensic techniques to view an employee’s browsing history, even when they are utilising private browsing?

Scenario 4:

An employee complains that their line manager is bullying them via an organisation-owned instant messaging app.

  • What level of logging does the organisation-owned instant messaging app contain?
  • Have you considered recovering deleted messages via a forensics investigation?