Deeper Dive: Choose The Right Forensics Firm For The Job

Forensics are a key component of many data incident investigations. The importance of forensics cannot be overstated. In fact, in 2018, 65% of the incidents we handled involved some type of forensic investigation.

Forensics firms can not only help determine what happened in a data incident but can also provide recommendations for containment and mitigation. Many of the key decisions in an investigation will be driven by forensics. Does the organization have notification obligations? Was there access to and/or acquisition or exfiltration of personal information or other sensitive data? Specifically, what data was accessed or exfiltrated? When did the compromise start and when did it end? Are the attackers still in the environment? Or in a business interruption event such as ransomware, how does the organization get back up and running and get back to work?