IT Acceleration's ForenSys™ Methodology was developed by our executive management team averaging more than 20 years of IT experience—including five years conducting forensic computing investigations and serving as expert witnesses at trials within federal and state court systems. The ForenSys Methodology encompasses:
- A state-of-the-art computer forensic laboratory
- Leading-edge equipment and tools
- Proven, repeatable methods and best practices
- Trained and certified computer forensic specialists
- Evidence tracking and preservation
- Complete litigation prevention and support services
ForenSys is divided into five phases with defined activities and deliverables to be provided by IT Acceleration.
Phase 1: Plan
The Plan phase lays a solid foundation for IT Acceleration's eRISK Defender™ and/or Forensic Computing services by defining the protocols to be followed for proactive eRisk protection and rapid response when incidents occur. The Plan phase provides a clear picture of your technical architecture and IT Acceleration's assessment of your electronic usage policy (EUP) against industry best practices.
Phase 2: Preserve
When incidents occur, you provide IT Acceleration with the necessary information about the people, equipment and knowledge related to the dispute. IT Acceleration uses the information to conduct the most relevant investigative process and effective incident analysis. Our forensic experts arrive at your facility within two hours of receiving your phone call. Computer imaging is performed at your location. Your equipment remains at your facility at all times. Proper evidence preservation, back-up and logging ensure a firm foundation for evidentiary authentication and tracking.
Phase 3: Analyze
Based on the information you provide and the computer image(s) taken, IT Acceleration performs its analysis of computer activity, filtering out irrelevant and duplicate results, and documenting key areas of concern.
Phase 4: Report
Your eRISK Defender Incident Report is compiled from our detailed analysis. An executive summary is written to highlight key findings and the report is burned to your choice of electronic media for delivery.
Phase 5: Review
Once you review the eRISK Defender Incident Report, a teleconference is arranged for IT Acceleration to provide further explanation, answer questions and guide next steps. Our experts typically serve as trusted advisors to help clients make decisions based on report results.
eRisk Facts