Digital Forensics Services

Transcription

1 Digital Forensics Services A KPMG SERVICE FOR G-CLOUD VII October 2015 kpmg.co.uk

2 Digital Forensics Services KPMG PROVIDES RELIABLE END TO END COMPUTER FORENSIC AND EXPERT WITNESS SERVICES We bring together Data Collection, Evidence Handling, Processing, Analysis, Reporting and Testimony to corporate, legal and government organisations. We have extensive experience in collecting and analysing material from a broad range of electronic data sources utilised by our clients including desktop PCs, laptop computers, servers, backup tapes, mobile devices and telephony systems. Our team contains a breadth of Forensic Computing experience, including former Law Enforcement and computer analysts. All of our computer forensic analysts have been trained in the use of recognised Evidential Continuity Procedures and Forensic Computing tools. Capability KPMG Forensic Technology professionals provide a wide range of IT forensic services. We use advanced digital evidence recovery techniques to support our investigations in a way that does not compromise the integrity of the evidence. We can investigate breaches of information security policy, IT asset misuse or hacking activities and are experienced at capturing and analysing data from a wide range of electronic devices, media and sources including desktop and laptop computers, servers, backup tapes, mobile devices and telephony systems. Once the data has been collected, we use our suite of market leading processing and review tools to process, search and analyse that data further. Available solutions include: Voice technology we are experienced at collecting, phonetically key-word searching and reviewing voice data. Instant Messaging/Bloomberg/Reuters chat data we use specialised parsers to facilitate the searching and review of chat data. Digital Evidence Recovery and Early Case Assessment tools these can be used to extract and process large volumes of electronic data and search that data for key words, date ranges, conversation threads, and potentially suspicious patterns. We offer a wide range of specialist tools including Encase, Forensic Technology Toolkit (FTK), Trident Wave, Index Engines, Nuix and many others. Investigative tools we use I2 Analyst Notebook, Tableau and NetMap to perform visual analysis and the charting of data. These tools are also extensively used by law enforcement, intelligence agencies and regulators. Innovative use of these tools can substantially increase the speed and effectiveness of investigations. Internet Search capabilities and social network analysis utilising the Envisional technology suite. Review Platforms we offer a number of platforms which facilitate the review of data, including Clearwell and Relativity. These tools facilitate predictive coding and enable users to identify key themes, concepts and patterns and thereby review the most relevant data earlier. 1

3 Our experts have given evidence in the UK Crown Court, UK High Court and US Federal Court in both criminal and civil proceedings and for both Prosecution and Defence. They have appeared as forensic experts on Civil search orders, provided witness statements and affidavits in support of civil applications and attended pre-trial mediation meetings. As a team we have attended court to give oral testimony directly relating to computer forensic matters on more than ten previous occasions, and continue to do so currently providing expert testimony in both UK Crown Court and in a European court as part of ongoing engagements. The team also attend court to provide testimony regularly in support of wider investigations including acting as Expert Witnesses. In addition to oral testimony we have provided expert reports and witness statements for court in civil litigation and criminal matters on a number of other occasions where we were not called to give evidence due to the clarity and uncontested nature of our findings. Court experiences 2

4 REACTIVE E-DISCOVERY KPMG s Forensic Technology team can help you respond to information requests rapidly, cost effectively and securely. We provide access to a wide range of market-leading technology applications and through the experience, skill and technical capability of our people can help you to reduce disclosure costs, enhance case strategy and manage risk. How we can help turn risk to advantage We offer e-discovery services across the entire spectrum of the EDRM (Electronic Discovery Reference Model) above and provide a dedicated project manager to guide you through each project s data collection, processing and review phases. Our First Response Team secures and collects data anytime, anywhere. We work with you to ensure that all potentially relevant data is preserved in order to minimise the risk of later challenge. We provide practical and pragmatic solutions to reduce the data set to a more manageable size. We process and cull data (including key word search) in many formats and from many sources, including voice, instant messages, cloud and social networking sites. We will advise you on the technology best suited to the needs of your case, including data sampling options, early case assessment tools, and suitable review platforms. We can host the collected data for review at either our secure data centre or on a mobile solution at your offices. We can help you reduce cost by: providing technology-enabled solutions that are tailored to your needs and which enable you to focus on the most relevant material quickly and efficiently. What sets us apart? Our people have significant experience in providing e- Discovery services to a varied client base including insurer clients, financial services client s and other corporations. We are technology Independent, we offer flexible technology solutions to meet specific client needs. We regularly test the latest developments to ensure that we offer leading technology solutions. Our Forensic Technology teams have certified technology specialists who know how to get the best out of the technology to meet the demands of each matter and are able to suggest innovative solutions to ensure that your matter is conducted as efficiently as possible. PROACTIVE E-DISCOVERY Information governance is the key to minimising risks and reducing costs in advance of an e-discovery matter. Our Litigation Readiness assessments involve reviewing the current state of Information Governance for our clients (including Records Retention) and discovery response practices and setting agreed targets based on efficiency and defensibility. We achieve this by identifying the gaps in the current state against the targets and then we support you in implementing our recommendations. When undertaking litigation readiness assessments we utilise our global methodology for discovery readiness. In addition, we also include a review of any existing technology solutions that you may have. Potential benefits to you We can help you reduce risk by: guiding you on best practice. providing forensically sound data handling. 3

5 CONTACT US KPMG G-Cloud Services Team T +44 (0) E [email protected] The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavour to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation. The KPMG name, logo and cutting through complexity are registered trademarks or trademarks of KPMG International.