{"id":5714,"date":"2017-11-25T15:51:40","slug":"digital-forensics-to-prevent-data-theft","title":{"rendered":"Digital forensics to address data theft"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-2169 alignleft\" src=\"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-content\/uploads\/sites\/3\/2017\/10\/forensik-digital-300x200.jpg\" alt=\"forensik digital\" width=\"300\" height=\"200\" srcset=\"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-content\/uploads\/sites\/3\/2017\/10\/forensik-digital-300x200.jpg 300w, https:\/\/cms-corporate.integrity-asia.com\/id\/wp-content\/uploads\/sites\/3\/2017\/10\/forensik-digital-150x100.jpg 150w, https:\/\/cms-corporate.integrity-asia.com\/id\/wp-content\/uploads\/sites\/3\/2017\/10\/forensik-digital-768x511.jpg 768w, https:\/\/cms-corporate.integrity-asia.com\/id\/wp-content\/uploads\/sites\/3\/2017\/10\/forensik-digital-640x426.jpg 640w, https:\/\/cms-corporate.integrity-asia.com\/id\/wp-content\/uploads\/sites\/3\/2017\/10\/forensik-digital-400x266.jpg 400w, https:\/\/cms-corporate.integrity-asia.com\/id\/wp-content\/uploads\/sites\/3\/2017\/10\/forensik-digital-367x244.jpg 367w, https:\/\/cms-corporate.integrity-asia.com\/id\/wp-content\/uploads\/sites\/3\/2017\/10\/forensik-digital.jpg 1000w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/>One of the unwanted things about departing employees is that they leave with the company\u2019s valuable data and intellectual property. Studies show that half of departing employees leave with confidential company information \u2014 either deliberately or unintentionally. Though there are several factors that motivate employees to steal company\u2019s data, financial gain is the most common.<\/p>\n<h2 id=\"mcetoc_1ii5qk2oh0\"><strong><span style=\"font-size: 24px\">Checklist in Digital Forensics<\/span><\/strong><\/h2>\n<p>Most organizations nowadays store data electronically, and employees have access to it via company or personal digital devices. The <a href=\"https:\/\/cms-corporate.integrity-asia.com\/id\/blog\/2022\/11\/23\/the-role-of-forensic-investigation-in-cases-of-suspected-data-theft\/\">typical stolen<\/a> data includes customer information, business plans, operational information, staff information, trade secrets, and proprietary software. When a company suspects that a departing employee might take, or already had taken company&#8217;s data, digital forensic methods can be used to review the employee&#8217;s computer or device.<\/p>\n<p>A company can significantly reduce the risk of data theft by using digital forensic practices during corporate investigations and exit interviews. Digital forensic includes techniques and tools designed to capture, analyze and evaluate digital data as evidence, plus identify if something happened, what happened, when it happened, who caused it to happen or was involved, and evidence to prove it. The digital forensic investigation will examine:<\/p>\n<ul>\n<li>Personal webmail accounts, such as Gmail or Yahoo<\/li>\n<li>Portable storage media (USB flash drives are the most common)<\/li>\n<li>Instant messaging programs (including social media programs such as Facebook and LinkedIn)<\/li>\n<li>Cloud storage such as Dropbox or iCloud<\/li>\n<li>Secure websites<\/li>\n<li>Accessing corporate systems via remote sessions<\/li>\n<li>Personal devices (allowed by &#8220;bring your own devices&#8221; policies)<\/li>\n<li>Email exchanges between work accounts and secondary email accounts<\/li>\n<li>Taking pictures of important data with personal phones or cameras<\/li>\n<\/ul>\n<h2 id=\"mcetoc_1ii5qm8n81\"><span style=\"font-size: 24px\"><b>Steps to Mitigate Risk<\/b><\/span><\/h2>\n<h3 id=\"mcetoc_1ii5qm8n82\"><span style=\"font-size: 20px\">Exit Interviews<\/span><\/h3>\n<p><span style=\"font-weight: 400\">The final interview with departing employees can provide valuable insights regarding the potential for data theft. HR staff can ask:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Is the employee storing important data on personal devices?<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Are there any devices taken home that contain sensitive information?<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400\">During the interview, an investigation can be conducted to determine if there are indications of data theft.<\/span><\/p>\n<h3 id=\"mcetoc_1ii5qm8n83\"><span style=\"font-size: 20px\">System Monitoring<\/span><\/h3>\n<p><span style=\"font-weight: 400\">To ensure that evidence is not permanently deleted, companies should monitor the systems and devices used by employees to access important data. This includes:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Data access audits: Checking access logs to detect suspicious activity.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Evidence preservation: Storing data that may be needed for future investigations.<\/span><\/li>\n<\/ul>\n<h3 id=\"mcetoc_1ii5r3j3v6\"><span style=\"font-size: 20px\">Periodic Investigations<\/span><\/h3>\n<p><span style=\"font-weight: 400\">Conducting periodic investigations before employees leave can help companies identify potential risks of data theft. This also facilitates the collection of evidence before the employee no longer has access to the system.<\/span><\/p>\n<h2 id=\"mcetoc_1ii5qm8n85\"><span style=\"font-size: 24px\"><b>Actions After Theft Occurs<\/b><\/span><\/h2>\n<p><span style=\"font-weight: 400\">If a company discovers that an employee has stolen data, the next step is to conduct a digital forensic investigation to understand in detail how the theft occurred. The investigation involves:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Analysis of stolen data: Determining the type of data taken and its potential impact.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Identification of theft pathways: Understanding the methods used to steal the data.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Legal action: If necessary, the company may take legal steps against the involved employee.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400\">Facing the risk of data theft by employees is a complex challenge, but it can be managed with the right approach. By implementing digital forensics and effective preventive measures, companies can protect their valuable information and minimize the impact of potential data theft.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Resource:<\/p>\n<p><a href=\"https:\/\/www.fraud-magazine.com\/article.aspx?id=4294994082\">Fraud Magazine<\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>One of the unwanted things about departing employees is that they leave with the company\u2019s valuable data and intellectual property. Studies show that half of departing employees leave with confidential company information \u2014 either deliberately or unintentionally. Though there are several factors that motivate employees to steal company\u2019s data, financial gain is the most common. [&hellip;]<\/p>\n","protected":false},"acf":[],"featured_image_url":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-content\/uploads\/sites\/3\/2017\/10\/forensik-digital.jpg","_links":{"self":[{"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/posts\/5714","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/comments?post=5714"}],"version-history":[{"count":0,"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/posts\/5714\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/media\/2169"}],"wp:attachment":[{"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/media?parent=5714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/categories?post=5714"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-corporate.integrity-asia.com\/id\/wp-json\/wp\/v2\/tags?post=5714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}