Terms of Engagement

Greetings,

I am updating our terms of engagement (and will provide the final document to Jamie, as promised awhile ago!) and could use some help with the Matter and Scope section. Awhile ago, we were just looking at hard drives and the following was appropriate

"A. Matter. The “Matter” consists of the following

Computer Forensic analysis of ______ hard drive(s)/CD(s)/phone(s)/PDA(s).

B. Scope of Matter. Consultant will conduct a digital forensic analysis of the hard drive provided by Client. The analysis will consist of identifying all financial records, emails, user profiles on the computer and using key word search provided by client. Consultant will prepare a written report outlining the findings and present to Client."

Now, the client is often saying "we think the following happened, what do you need to do your work?" and we can walk out with images from several systems, IDS logs, thumb drives, etc.

And the Scope …. well, it's hard to come up with a single paragraph that covers the possibilities.

If anyone has some suggestions for appropriate wording for this, I'd appreciate the help.

-David