Can my internal IT staff conduct an investigation and extract electronic evidence?
Although internal IT staff are often highly knowledgeable regarding their working environment and the technology employed within, computer forensic investigations are best performed by outside experts. Specifically, the nature of the forensic analysis process coupled with the requirements by law enforcement agencies and the court system necessitates that computer forensic investigations are performed by external entities equipped with authorized forensic technology and trained to observe forensic protocols.
Related Questions
- What are some of the advantages of using an external, independent forensic accounting firm to conduct an investigation versus an internal resource?
- What can be withheld regarding internal investigation of staff misconduct? Who has a right of access to this information?
- Can my internal IT staff conduct an investigation and extract electronic evidence?
