Once the necessary data has been identified, the subsequent step involves collecting the information. Typically, this task is undertaken by vendors offering specialized services. It is generally advised to avoid using your own IT department or the client’s IT personnel for data collection. For more information on the challenges associated with these options, please refer to the Market Survey section.
Forensic services require highly specialized skills that take time to develop. Consequently, companies operating in this sector tend to be relatively small, even when the team is part of a larger organization, such as the forensic groups within major consultancy firms. It is not uncommon for clients to establish working relationships with specific professionals in the forensic field and maintain their loyalty to those individuals, even if they transition to a different organization.
The requirements typically fall into two categories: the provision of forensic services and the competent collection of Electronically Stored Information (ESI), which may need to adhere to evidentiary standards. As a general guideline, forensic services are often required when fraud is suspected, and information must be retrieved from mainstream computer systems or more obscure sources, such as mobile phones, tablet devices, and online social networking sites.
For draft requirements within this area, please consult the Procurement Section.
