The skills required to provide forensic services are very specialised, and take time to acquire. Therefore the firms operating in this area tend to be relatively small, even when the team itself is part of a large organisation such as the forensic groups of the big consultancy firms. It has been known for clients to form working relationships with specific individuals in the forensic world and remain “loyal” to that individual even when they change the organisation they work for.
Overall Considerations #
There are two main types of data collection:
- Forensic services, such as imaging hard drives, copying data in a forensically sound manner (for example in fraud cases) or retrieval of deleted information.
- Data collection in accordance with the guidelines embodied in the Electronic Data Questionnaire.
Example Requirements #
The services to be provided by the selected supplier should include:
- Forensically sound imaging of individual PC’s, laptops, Apple Macs.
- Provision of a “data map” describing where the ESI is located throughout the client’s IT infrastructure.
- Collection of selected ESI from client’s infrastructure.
- Remote collection of selected ESI for overseas clients either by hardware or
- software based solutions.
- Sound knowledge of the data protection requirements in various countries.
- Support to [CLIENT] in exploring the collection of ESI from external devices such as pen drives, mobile phones, external hard drives, etc.
- Support to [CLIENT] in exploring the possible collection of ESI from on-line applications such as email systems or social networking software.
- Processing of back-up tapes.
In order to carry out these activities the provider will need to:
- Enter into a call-off contract with [CLIENT]
- Dedicate the required facilities at their site.
- Resource the required operations.
- Provide an experienced project manager to manage individual projects.
- Provide periodic reporting on project status.
- Manage the project budget to ensure costs are monitored and controlled.