The Switch to Private Sector Digital Forensics
Fri, 07/18/2014 - 9:05am
There is clearly a difference in the type of investigations and examinations being performed versus what are encountered in the public sector. The private sector examiner can be expected to provide evidence to private attorneys, corporations, private investigators, and corporate security departments. For instance, attorneys will often employ an examiner to examine digital data for purposes of litigation in civil matters such as divorces, wrongful terminations, misuse of company information or assets, sexual harassment, or personal injury cases. As a result, examiners may also be required to provide testimony in court.
The protection and security of information is extremely important. Much of the focus of securing information is, and should be, proactive and consists of putting or having in place systems (policies, procedures, technical practices, trained personnel, etc.) to secure information assets. Information could include secret company data, customer bank account numbers, credit card numbers, human resource information, medical records, intellectual property, and so forth. An entire infrastructure exists to support information security. That is not to say that information does not become compromised. When this occurs, the examiner’s focus is to determine what happened (for potential litigation purposes) and, importantly, what can be done to prevent further incidents from occurring. This could involve the examiner delving into incident response, extensive network forensics, vulnerability assessments, penetration testing, and so forth. As such, it may be more practical for an examiner to have a strong information technology or information systems security background in addition to forensics experience. Additionally, having served a prior internship, obtaining current relevant certifications, and demonstrating the ability to communicate both orally and in writing will provide additional experience and knowledge to assist the examiner.
From: Starting A Career in Digital Forensics: Part 2 by John J. Barbara