Forensics FAQs

Why use PassProtect Forensics Services?

Our experienced investigative team has conducted hundreds of investigations, often working in conjunction with corporate security, human resources, legal divisions and Federal Law Enforcement. During this time, our investigators have never lost a court case. In fact, most of the counter-lawsuits that have been brought up against PassProtect clients have been dismissed prior to the case proceeding due to the clarity, thoroughness and professionalism in which the evidence is presented in our forensic reports. Our expertise translates into professional, quick, efficient and cost-effective investigations that produce all the necessary evidence in a court-admissible format.

Furthermore, PassProtect consultants are qualified in information security and are able to assist you in securing your environment to prevent further re-occurrences. Our consultants can also help in establishing proper incident handling procedures, security policies and guidelines, and recommend a general security controls meet your organization's needs.

Why can't my IT people carry out this forensic investigation?

Computer evidence is no different from evidence collected at any other crime scene. Skilled investigators and special equipment are required to properly handle potential evidence in order to prevent accidental or malicious tampering. Most cases will not get past an initial court hearing unless it can be established that appropriate procedures were followed.

Furthermore, legal precedent states that in order to serve as an expert witness, a forensic investigator must be properly qualified to analyze the evidence. PassProtect forensic investigators not only qualify as experts for court purposes, but they also have had extensive hands-on casework in highly involved and technical investigations. Our investigators are differentiated from other investigators by their technical skills and their strong technology backgrounds.

What if I am not going to court? Then can my IT staff do it?

When performing an investigation, one cannot predict when one will encounter evidence that will be required in court. It is not advisable to limit your options should the need arise to bring the evidence to court. Therefore, it is important to assume that all cases could wind up in a court of Law. Because lawmakers are increasingly passing new legislation, it is important to always keep in mind where these boundaries might exist.

PassProtect forensic investigators work closely with legal counsel to ensure that no legislations are violated during the course of an investigation. In addition, our investigators are trained to discern when a reasonable cause exists to seize and analyze electronic evidence. Most importantly, however, PassProtect investigators provide an impartial, unbiased opinion of the findings, eliminating any question as to the transparency of this information.

Will the investigation need to be done in my premises?

PassProtect does offer on-site acquisition and analysis, but customers often find it desirable to remit evidence to the PassProtect laboratory for investigation.  This can prevent undesired suspicion, rumors an accusations from generating an uncomfortable work environment while the investigation is underway. It can also mean significant savings to the customer. For more information on  how to maintain a court-admissible chain of custody, please refer to our procedures describing how to remit evidentiary equipment to the PassProtect laboratory facility. 

Is this an expensive service?

No. In fact, PassProtect offers rates that are below industry averages. This is possible because our consultants are equipped with leading edge forensics tools and follow highly streamlined forensics processes to quickly hone in on the relevant evidence. This means while others spend the time collecting the evidence, we spend the time analyzing the evidence. In turn, this translates into higher quality investigations at significant cost savings for our customers.

Take a look at the table below that provides a sample comparison from a real-life scenario:


click on image to view larger image.

Figures above are estimates. Actual costs varies on a case by case basis. Labor costs calculated based on hypothetical 3-day forensic investigation effort time, using hourly fees from leading firms, adjusted for productivity and equipment/resources.

Is this legal advice?

No. We are not attorneys and are not qualified to give legal advice.

back to top




 
Why should I choose PassProtect?
Why can't my IT people do it?
What if I am not going to court? Then can my IT staff do it?
Will the investigation have to be done on my premises?
Is this an expensive service?
Is this legal advice?

Please fill in our request for information form to be contacted by a representative regarding our service offerings.

 
  © 2007 PassProtect, LLC.