In Depth

Investigations: Merge Ahead

In the enterprise setting, there's no such thing as a digital investigation. Or a physical one. Searching for clues and resolutions requires a blend of disciplines governed by a flexible forensic mind-set.

By Malcolm Wheatley

Page 5

SSC's Gavish concurs. The mind-set is important, he stresses—and ultimately determines whether an investigation is staffed by two specialist skill sets or one person with both. "The physical investigator will want to stay close to his comfort zone of traditional investigative approaches, while the IT forensic person is going to feel most at home with the IT tools and techniques he or she is most familiar with," he says. "If you can't break that, then it's best to double-staff and task people to do individual parts of the overall investigation." ##

Other stories by Malcolm Wheatley

physical investigations

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Security Directions: A Virtual Conference

Security Directions Available On Demand Sept. 30 - Dec. 30

Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.

» Register Now

WEBCAST
Protecting PII: How to Work with IT to Manage Risk

Compuware Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.

» View this Webcast

Featured Sponsors