IM & T Assurance
Forensic Computing Ever increasing use of computers is made in the workplace to store and access information whether from local systems or from the internet. With this usage comes increased risks; staff can abuse internet access or email services, illicit or illegal information and images can enter and be circulated internally and externally causing reputational damage or bringing about legal action. As an example, Operation Ore, a large-scale international police operation that commenced in 1999, was instigated to indict thousands of users of websites featuring child pornography. In the UK, it has led to 7,250 suspects being identified, 4,283 homes being searched, 3,744 arrests being made, 1,848 persons being charged, 1,451 being convicted, 493 being cautioned and 879 further investigations still being underway. As approximately 5% of the UK workforce is employed within the NHS it would be dangerous to assume that we are immune and that such activity couldn't happen in the workplace. Furthermore, the proliferation and availability of electronic systems opens opportunities for those intent on perpetrating frauds or other criminal acts. There are regular press stories concerning employees who have either abused there employers systems by using them to download or distribute mp3 files, or who have used internet auction sites to sell NHS equipment etc. There are even instances where the perpetrator has kept a record of their "crimes" on their pc!. Whether identifying and gathering to support legal action or internal disciplinary action it is important that the evidence is properly secured using robust forensic processes. It is also important to remember that, often, you will not know the extent or content until after a thorough investigation. Reviewing files and pc's locally, without expert forensic skills and tools may damage the evidence, rendering it inadmissible and causing more damage to the organisation than it could ever resolve. Our key message would always be "don't try to investigate it yourself, call the experts".
How We Can Help At MIAA we have developed a robust forensic technology service which brings together the skills of our IM&T Assurance team, our Local Counter Fraud Specialist and a number of specialist forensic laboratories, each with a track record both in the NHS and in the commercial sector, who use the latest best of breed tools to acquire and analyse and report data for evidence. This allows us to provide a full end-to-end service to our clients starting at the collection of hardware etc from your site, though we can actually do this remotely if the recovery is to be covert or equipment can't be removed from site, delivery to the laboratory, specialist imaging of data, analysis, reporting, attendance at disciplinary hearings and acting as an "expert witness". Our service complies fully with the guidance issued by the Association of Chief Police Officers and will, thus, stand legal scrutiny. Before initiating any investigation we will provide you with an indicative fee, however the nature of such work is such that once an investigation commences the scope and amount of investigation may need to be adjusted. In such circumstances we will liaise with you to ensure that this is acceptable. We will never increase our fees beyond the initial indication without your knowledge and approval. As with all of our services, our solutions are tailored to meet the needs of the client. We would be happy to discuss your needs in this area and to develop a solution to meet them. For more information please contact us. | 
