Welcome!

Wearables Authors: Liz McMillan, Zakia Bouachraoui, Yeshim Deniz, Elizabeth White, Pat Romanski

News Feed Item

Using Internal IT Staff to Investigate Computer Incidents Invites the Possibility of Poor Management Decisions Based on Results Obtained Says K&F Consulting's Greg Fordham

Using Internal IT Staff to Investigate Computer Incidents Invites the Possibility of Poor Management Decisions Based on Results

ALPHARETTA, Ga., July 31 /PRNewswire/ -- The normal corporate response to a network intrusion, data theft or destruction, or even something as commonplace as an employee misconduct complaint is often to dispatch the internal IT staff to investigate and deliver enough information to senior management that they can evaluate the scope and veracity of the event and take action if necessary.

However K&F Consulting's founding principal, Greg Fordham, thinks that approach is analogous to returning to your home, finding a window broken and your belongings disheveled, and deciding to call the repairman first instead of the police.

Fordham and the members of his firm regularly advise clients on how to respond to computer based incidents.

According to Fordham there are some very basic dilemmas associated with calling on the internal IT staff members rather than a forensic expert to investigate an incident.

"The IT mission is to operate and maintain an organization's computer systems. They are usually not well suited for incident response since they are not trained to collect and preserve digital evidence," Fordham said.

Using the same skills that they would use to install a print driver, Fordham said IT staffers will likely, at a minimum, change important date and time stamps, lose volatile memory, and change or overwrite free space.

"Even if the consequence of these blunders can be neutralized, they still bring complexity and cost to any subsequent litigation that may be initiated. And their actions could also raise doubt about the authenticity of significant evidence," Fordham said.

Fordham also said the lack of forensic analysis training and experience could result in telltale signs of wrongdoing going unnoticed.

"The average IT staff member may not be aware of the additional data resident in many computer system artifacts or even how to interpret them. Without the knowledge of their existence or how they could be used, false conclusions could be reached," he said.

A discussion paper written by Fordham, Incident Response: The First Step in e-Discovery, may be downloaded without charge at http://www.knfcon.com/IRFirstStep.pdf

Fordham has written extensively on forensic auditing and e-discovery matters. He is a contributing writer for the 2007 Construction Law Update which was published earlier this year by Aspen Publishers and the Georgia Bar Association has approved his e-discovery presentation for CLE credit.

About K&F Consulting

With offices located in the metro Atlanta area, K&F Consulting services a nationwide clientele. The firm provides a variety of e-discovery and computer forensic services including database forensics, software forensics as well as the more well known forms of computer forensics.

For more information visit the company's web site, http://www.knfcon.com/.

K&F Consulting

CONTACT: Greg Fordham of K&F Consulting, Inc., +1-770-642-0311,
+1-800-335-1188, Fax, +1-770-642-9913, [email protected]

Web site: http://www.knfcon.com/IRFirstStep.pdf
http://www.knfcon.com/

More Stories By PR Newswire

Copyright © 2007 PR Newswire. All rights reserved. Republication or redistribution of PRNewswire content is expressly prohibited without the prior written consent of PRNewswire. PRNewswire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

IoT & Smart Cities Stories
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
DXWorldEXPO LLC announced today that Telecom Reseller has been named "Media Sponsor" of CloudEXPO | DXWorldEXPO 2018 New York, which will take place on November 11-13, 2018 in New York City, NY. Telecom Reseller reports on Unified Communications, UCaaS, BPaaS for enterprise and SMBs. They report extensively on both customer premises based solutions such as IP-PBX as well as cloud based and hosted platforms.
To Really Work for Enterprises, MultiCloud Adoption Requires Far Better and Inclusive Cloud Monitoring and Cost Management … But How? Overwhelmingly, even as enterprises have adopted cloud computing and are expanding to multi-cloud computing, IT leaders remain concerned about how to monitor, manage and control costs across hybrid and multi-cloud deployments. It’s clear that traditional IT monitoring and management approaches, designed after all for on-premises data centers, are falling short in ...
The deluge of IoT sensor data collected from connected devices and the powerful AI required to make that data actionable are giving rise to a hybrid ecosystem in which cloud, on-prem and edge processes become interweaved. Attendees will learn how emerging composable infrastructure solutions deliver the adaptive architecture needed to manage this new data reality. Machine learning algorithms can better anticipate data storms and automate resources to support surges, including fully scalable GPU-c...
A valuable conference experience generates new contacts, sales leads, potential strategic partners and potential investors; helps gather competitive intelligence and even provides inspiration for new products and services. Conference Guru works with conference organizers to pass great deals to great conferences, helping you discover new conferences and increase your return on investment.
Poor data quality and analytics drive down business value. In fact, Gartner estimated that the average financial impact of poor data quality on organizations is $9.7 million per year. But bad data is much more than a cost center. By eroding trust in information, analytics and the business decisions based on these, it is a serious impediment to digital transformation.
We are seeing a major migration of enterprises applications to the cloud. As cloud and business use of real time applications accelerate, legacy networks are no longer able to architecturally support cloud adoption and deliver the performance and security required by highly distributed enterprises. These outdated solutions have become more costly and complicated to implement, install, manage, and maintain.SD-WAN offers unlimited capabilities for accessing the benefits of the cloud and Internet. ...
Business professionals no longer wonder if they'll migrate to the cloud; it's now a matter of when. The cloud environment has proved to be a major force in transitioning to an agile business model that enables quick decisions and fast implementation that solidify customer relationships. And when the cloud is combined with the power of cognitive computing, it drives innovation and transformation that achieves astounding competitive advantage.
SYS-CON Events announced today that Silicon India has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Published in Silicon Valley, Silicon India magazine is the premiere platform for CIOs to discuss their innovative enterprise solutions and allows IT vendors to learn about new solutions that can help grow their business.
DXWorldEXPO LLC announced today that "IoT Now" was named media sponsor of CloudEXPO | DXWorldEXPO 2018 New York, which will take place on November 11-13, 2018 in New York City, NY. IoT Now explores the evolving opportunities and challenges facing CSPs, and it passes on some lessons learned from those who have taken the first steps in next-gen IoT services.