±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36568
New Yesterday: 3 Visitors: 141

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Corporate Forensics - OMG!

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2, 3, 4, 5  Next 
  

whitecap
Member
 

Corporate Forensics - OMG!

Post Posted: Mar 05, 07 17:47

Is it just me or is it a pain setting up Computer Forensics in the corporate enviroment? After (too) many years in LE I took the plunge and followed the money into the corporate world. Now before I start just let me say I AM enjoying it but feel incredibly frustrated!

So, main gripes:

Everything happens so sloooooowly! - In LE if it needed doing it was done, no if's, no buts.

The lack of teamwork. - -Do I need to say more?

How many times do I have to say.......? - Getting sick of telling Directors/Managers why we HAVE to introduce evidence handling procedures.

Obstructive IT departments/managers! - What is it, are they jealous of the fact that someone who has lived/worked in the real world, (as opposed to university), is accessing THEIR network!

Trying to explain.....! - Why, after the company has invested LARGE sums of money in a forensics package do I have to continually justify the purchase of equipment to ACTUALLY CARRY OUT INVESTIGATIONS!.....Ahhh I know, nobody asked anyone with forensics experience to actually spec the purchase, it was left to the IT department.

And....of being told, all the time, don't worry about 'forensicy stuff' it'll never go to court/tribuneral/anything!

Anyone else with similar experiences?  
 
  

deckard
Senior Member
 

Re: Corporate Forensics - OMG!

Post Posted: Mar 05, 07 19:11

Well.....
Welcome to the world of corporate. What you are describing is fairly typical. It's a jump that keeps a lot of ex LE guys from functioning well in the corporate environmnet, not in just in CF but in security and PI as well.

The primary goal of LE is to enforce law as well as do things that make the public feel safe. The primary goal of the corporate world is profit and shareholder happiness.

When a private concern has a incident, profit considerations will rule the response. Same with planning, staffing and outfitting the CF dept.

CF is seen in most cases as a necessary evil that is required by compliance issues, not as a moral or enforcement tool of policy. The guys in charge want to fix the problem, get all systems back in operation, keep from having expenses, maxmize revenue and handle any employee isseues quietly without LE involvement. And yes, most if not all corp CF issues will never end up in any kind of court, by choice of mgmt.

FWIW, that has been my long term experience working as a consultant to corps in CF and IR.
_________________
Replicants are like any other machine - they're either a benefit or a hazard. If they're a benefit, it's not my problem 
 
  

jamie
Site Admin
 

Re: Corporate Forensics - OMG!

Post Posted: Mar 05, 07 19:34

I'll second most of that (on the corporate side). Any regrets, whitecap?

Jamie
_________________
Jamie Morris
Forensic Focus
Web: www.forensicfocus.com
Twitter: twitter.com/ForensicFocus
Facebook: www.facebook.com/forensicfocus 
 
  

keydet89
Senior Member
 

Re: Corporate Forensics - OMG!

Post Posted: Mar 05, 07 20:11

Whitecap,

It appears that while you've physically made the move to corporate, you still need to change your mindset, as well.

In the corporate arena, there is no "you must to this"...in some cases, even if the CEO says this, it still isn't the case. The requirement is often things like profits, or other external factors such as Visa PCI, potential for (negative) public exposure, fines, etc. Regulatory organizations and compliance issues play a big part, too.

Good luck,

H  
 
  

AndyFox
Member
 

Re: Corporate Forensics - OMG!

Post Posted: Mar 05, 07 20:58

Hi Whitecap

good topic - most of our business comes from LE but we are slowly doing more corporate work but the issue we find is that companies don't really want to admit they have a problem and there are two reasons for this. If the are a big company then forensics is all about damage limitation - eg theft of data, databases, dox etc - they don't want to be seen to have a problem - the second is that is they have been defrauded through ecommerce or hackers etc then they don't want mto have to admit to have to spend more moeny on new or upgraded security.

I always look at the UK banking industry as the example - fraudulent activity costs UK banks well over £250 million per year but, unfortunately this isn't enough for them to lose. The technology is available to wipe out fraud it just that the costs of installing/rolling out + the fraud bill is just too small for the banks to get enough of a fincial benefit back. Eg if they are only going to save £300 million and new systems cost £50 million then to them there is really no point when they are making £10billion worth of profit anyway - you get my drift?
_________________
Andy Fox
Digital Forensics Director
Audax Digital Forensics
www.audaxuk.com 
 
  

whitecap
Member
 

Re: Corporate Forensics - OMG!

Post Posted: Mar 05, 07 21:25

Thanks for the replies guys,

Guess I am just having a bad day today! I appreciate the business reasons for not taking things to court/tribunals but this, (IMHO), does not mean that we should not apply similar procedures to those used in LE. After all, how embarrassing will it be to stand in front of a tribunal/judge, shrug your shoulders and explain why the evidence requested is not available. I think it was $23 million that that explanation cost UBS.

No Jamie, no regrets at all, it was time to move on.

Oh well.........once more into the breech!!  
 
  

AndyFox
Member
 

Re: Corporate Forensics - OMG!

Post Posted: Mar 05, 07 21:35

I don't think anyone is saying apply alternative procedures or process it's just the buy in from the client in where the problem is.
_________________
Andy Fox
Digital Forensics Director
Audax Digital Forensics
www.audaxuk.com 
 

Page 1 of 5
Page 1, 2, 3, 4, 5  Next