SlideShare ist ein Scribd-Unternehmen logo
1 von 19
FEI – Western Mass
                             Digital Forensics &
                             eDiscovery (the Ba$ic$)
                             The Lorenzi Group



(c) 2012 - The Lorenzi Group LLC – All Rights Reserved   1
Employee Lawsuits


Median Employer Cost:
     $326,640.00



         (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
FCPA

Mean Average Fine (2011)


$20,000,000.00



          (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Internal Investigations

          SKYROCKETING

Up an average or 50% across all sectors



Larger companies using more frequently

       MITIGATION is the Goal



                 (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Metadata
           What is it?

           Examples you know




(c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Electronic Information
               Documents

                 Emails

            Instant Messages

             Videos (Skype)

        Maybe even voicemails…..

Computers, smartphones, copiers, Xbox, Cars…
and coming soon to a refrigerator near you!


                   (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Data




Not words in a book; Cheese on a pizza!

                 (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Digital Forensics: The
             Process
Digital Forensics            Using a 35MM Camera
Create a FORENSIC            Load Film & Take
Image                        Pictures
Process Image (Data          Develop Film
Carve & Index)
Analyze Data, Search         Decide which Pictures
Terms, etc                   you like
Reporting & Testimony        Scrapbook Photo Album


                        (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Your WORST Nightmare

          SPOLIATION

 What is the fastest way to “win” a lawsuit?

         Drive up eDiscovery costs!


*NOTE: The only ones who “win” lawsuits are the lawyers!



                         (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Ounce of Prevention
Planning mitigates costs
   Data segregation
   Vendor strategy
   Data & User Monitoring




                 (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Proactive “Forensics”
Doc’s, Email, IM’s, Skype (video calls), etc.
Resource/Program Usage
User Activity/In-Activity
Document Access & Changes
Website Visits
File Transfers, CD Burns, USB Thumbdrives
More


                       (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Cost Justification
1. Segregated data saves Time, Money, & Scope

2. Vendor Action Plans can reduce costs by 20%

3. Data & User Monitoring
      40% Online Fraud is EMPLOYEE driven!
      Employees SELF REPORT 1-3 hours of wasted time at work.
      (Salary.com Inc 11/19/2010)
      What isn’t being self reported???
      15 minutes of increased productivity = 2.5%




                             (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
From eDisaster to
        eDiscovery
       Digital Forensics is the 1st step



E-Discovery
   Converting paper
   Results of Digital Forensics

Review for Privilege & Relevancy

Mark & Share


                      (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Reality


This is not going away……




          (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Doesn’t NEED to be
       Expensive

Expensive is a relative term….



Planning ahead, saves more money than time

If it can be captured, it will be asked for




                       (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Cost Saving Tips & Tricks
Be LIBERAL on Preservation,
CONSERVATIVE on Restoration

It is NOT “all or nothing” (unless you wait too
long)

The hidden killer is Monthly Storage Fees

Demand Flat Rates & Fixed Pricing whenever
possible

Push vendors to work together

                    (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Digital Forensics Costs
Preservation: < $1000 per Image
Restoration: $500 per Image
Data Extraction & Analysis: $4-5K per Image
Deposition & Testimony not included


Budget $6K per media imaged
Make hard decisions @ $3K


                   (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
eDiscovery Costs
Varies Widely
STOP paying by GB (gigabyte)!!
Pay Hourly or Fixed Price – Savings are in the
70% range… sometimes more
Online Hosting is expensive, but MAY be cheaper
than in-house


Expect to pay $5-10K per media image, push for
$10K Total (DiFo & eD)


                     (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
Q&A

   Robert Fitzgerald

  The Lorenzi Group

www.thelorenzigroup.com

  866-632-9880 x123




         (c) 2012 - The Lorenzi Group LLC – All Rights Reserved

Weitere ähnliche Inhalte

Ähnlich wie Digital Forensics & eDiscovery for the Financial Executive

trellix-dlp-buyers-guide.pdf
trellix-dlp-buyers-guide.pdftrellix-dlp-buyers-guide.pdf
trellix-dlp-buyers-guide.pdfLaLaBlaGhvgT
 
10/20/2012 Meeting - Corporate Worldwide Anti-Piracy
10/20/2012 Meeting - Corporate Worldwide Anti-Piracy10/20/2012 Meeting - Corporate Worldwide Anti-Piracy
10/20/2012 Meeting - Corporate Worldwide Anti-Piracyacfesj
 
Life of a GB: Where Is My Data Going and How Can I Get It There Faster?
Life of a GB: Where Is My Data Going and How Can I Get It There Faster?Life of a GB: Where Is My Data Going and How Can I Get It There Faster?
Life of a GB: Where Is My Data Going and How Can I Get It There Faster?Ipro Tech
 
Smarter planet and mega trends presentation 2012
Smarter planet and mega trends presentation 2012Smarter planet and mega trends presentation 2012
Smarter planet and mega trends presentation 2012Joergen Floes
 
The Double-edge sword of Mobile Broadband and how to use it.
The Double-edge sword of Mobile Broadband and how to use it. The Double-edge sword of Mobile Broadband and how to use it.
The Double-edge sword of Mobile Broadband and how to use it. BSP Media Group
 
Social Gaming Metrics
Social Gaming MetricsSocial Gaming Metrics
Social Gaming MetricsAnita Andrews
 
Rethinking Disaster Prepardness THEITS12
Rethinking Disaster Prepardness THEITS12Rethinking Disaster Prepardness THEITS12
Rethinking Disaster Prepardness THEITS12Thomas Danford
 
InSource 2017 IIoT Roadshow: Evolution or Revolution
InSource 2017 IIoT Roadshow: Evolution or RevolutionInSource 2017 IIoT Roadshow: Evolution or Revolution
InSource 2017 IIoT Roadshow: Evolution or RevolutionInSource Solutions
 
Why is LEO CDP important for digital business ?
Why is LEO CDP important for digital business ?Why is LEO CDP important for digital business ?
Why is LEO CDP important for digital business ?Trieu Nguyen
 
Pv2020 syed hoda cisco
Pv2020 syed hoda ciscoPv2020 syed hoda cisco
Pv2020 syed hoda ciscoSyed Hoda
 
AiLibrary Garage.com application review - by Gordon Kraft
AiLibrary Garage.com   application review - by Gordon Kraft AiLibrary Garage.com   application review - by Gordon Kraft
AiLibrary Garage.com application review - by Gordon Kraft Gordon Kraft
 
Humans Are The Weakest Link – How DLP Can Help
Humans Are The Weakest Link – How DLP Can HelpHumans Are The Weakest Link – How DLP Can Help
Humans Are The Weakest Link – How DLP Can HelpValery Boronin
 
Big data(Sandeep Chaudhary)
Big data(Sandeep Chaudhary)Big data(Sandeep Chaudhary)
Big data(Sandeep Chaudhary)iamsandeepsivach
 
Joseph Bradley, IoE in action, Cisco Live
Joseph Bradley, IoE in action, Cisco LiveJoseph Bradley, IoE in action, Cisco Live
Joseph Bradley, IoE in action, Cisco LiveFelipe Lamus
 
IT Consumerization – iPad’ing the Enterprise or BYO Malware?
IT Consumerization – iPad’ing the Enterprise or BYO Malware?IT Consumerization – iPad’ing the Enterprise or BYO Malware?
IT Consumerization – iPad’ing the Enterprise or BYO Malware?Barry Caplin
 

Ähnlich wie Digital Forensics & eDiscovery for the Financial Executive (20)

trellix-dlp-buyers-guide.pdf
trellix-dlp-buyers-guide.pdftrellix-dlp-buyers-guide.pdf
trellix-dlp-buyers-guide.pdf
 
10/20/2012 Meeting - Corporate Worldwide Anti-Piracy
10/20/2012 Meeting - Corporate Worldwide Anti-Piracy10/20/2012 Meeting - Corporate Worldwide Anti-Piracy
10/20/2012 Meeting - Corporate Worldwide Anti-Piracy
 
Life of a GB: Where Is My Data Going and How Can I Get It There Faster?
Life of a GB: Where Is My Data Going and How Can I Get It There Faster?Life of a GB: Where Is My Data Going and How Can I Get It There Faster?
Life of a GB: Where Is My Data Going and How Can I Get It There Faster?
 
Smarter planet and mega trends presentation 2012
Smarter planet and mega trends presentation 2012Smarter planet and mega trends presentation 2012
Smarter planet and mega trends presentation 2012
 
Why Things Go Awry
Why Things Go AwryWhy Things Go Awry
Why Things Go Awry
 
The computing age
The computing ageThe computing age
The computing age
 
The Double-edge sword of Mobile Broadband and how to use it.
The Double-edge sword of Mobile Broadband and how to use it. The Double-edge sword of Mobile Broadband and how to use it.
The Double-edge sword of Mobile Broadband and how to use it.
 
A Futurist Perspective
A Futurist PerspectiveA Futurist Perspective
A Futurist Perspective
 
Social Gaming Metrics
Social Gaming MetricsSocial Gaming Metrics
Social Gaming Metrics
 
Rethinking Disaster Prepardness THEITS12
Rethinking Disaster Prepardness THEITS12Rethinking Disaster Prepardness THEITS12
Rethinking Disaster Prepardness THEITS12
 
InSource 2017 IIoT Roadshow: Evolution or Revolution
InSource 2017 IIoT Roadshow: Evolution or RevolutionInSource 2017 IIoT Roadshow: Evolution or Revolution
InSource 2017 IIoT Roadshow: Evolution or Revolution
 
Why is LEO CDP important for digital business ?
Why is LEO CDP important for digital business ?Why is LEO CDP important for digital business ?
Why is LEO CDP important for digital business ?
 
Pv2020 syed hoda cisco
Pv2020 syed hoda ciscoPv2020 syed hoda cisco
Pv2020 syed hoda cisco
 
AiLibrary Garage.com application review - by Gordon Kraft
AiLibrary Garage.com   application review - by Gordon Kraft AiLibrary Garage.com   application review - by Gordon Kraft
AiLibrary Garage.com application review - by Gordon Kraft
 
KMWorld Presentation
KMWorld PresentationKMWorld Presentation
KMWorld Presentation
 
Humans Are The Weakest Link – How DLP Can Help
Humans Are The Weakest Link – How DLP Can HelpHumans Are The Weakest Link – How DLP Can Help
Humans Are The Weakest Link – How DLP Can Help
 
Big data(Sandeep Chaudhary)
Big data(Sandeep Chaudhary)Big data(Sandeep Chaudhary)
Big data(Sandeep Chaudhary)
 
Joseph Bradley, IoE in action, Cisco Live
Joseph Bradley, IoE in action, Cisco LiveJoseph Bradley, IoE in action, Cisco Live
Joseph Bradley, IoE in action, Cisco Live
 
AI 2023.pdf
AI 2023.pdfAI 2023.pdf
AI 2023.pdf
 
IT Consumerization – iPad’ing the Enterprise or BYO Malware?
IT Consumerization – iPad’ing the Enterprise or BYO Malware?IT Consumerization – iPad’ing the Enterprise or BYO Malware?
IT Consumerization – iPad’ing the Enterprise or BYO Malware?
 

Mehr von The Lorenzi Group

ROAR in Real Like: Heartbeat Helper
ROAR in Real Like: Heartbeat HelperROAR in Real Like: Heartbeat Helper
ROAR in Real Like: Heartbeat HelperThe Lorenzi Group
 
Why ROAR makes CENTS: An Insiders Guide to Saving Clients Money (While Protec...
Why ROAR makes CENTS: An Insiders Guide to Saving Clients Money (While Protec...Why ROAR makes CENTS: An Insiders Guide to Saving Clients Money (While Protec...
Why ROAR makes CENTS: An Insiders Guide to Saving Clients Money (While Protec...The Lorenzi Group
 
ROAR Provides Peace of Mind in Digital Enviroments
ROAR Provides Peace of Mind in Digital EnviromentsROAR Provides Peace of Mind in Digital Enviroments
ROAR Provides Peace of Mind in Digital EnviromentsThe Lorenzi Group
 
ROAR in Real Life: Picture Perfect
ROAR in Real Life: Picture PerfectROAR in Real Life: Picture Perfect
ROAR in Real Life: Picture PerfectThe Lorenzi Group
 
Digital Forensics: The Employees' Dilemma
Digital Forensics: The Employees' DilemmaDigital Forensics: The Employees' Dilemma
Digital Forensics: The Employees' DilemmaThe Lorenzi Group
 
Rising Cost of Child Porn Defense
Rising Cost of Child Porn DefenseRising Cost of Child Porn Defense
Rising Cost of Child Porn DefenseThe Lorenzi Group
 
Security Analytics for Certified Fraud Examiners
Security Analytics for Certified Fraud ExaminersSecurity Analytics for Certified Fraud Examiners
Security Analytics for Certified Fraud ExaminersThe Lorenzi Group
 
Digital Forensics, eDiscovery & Technology Risks for HR Executives
Digital Forensics, eDiscovery & Technology Risks for HR ExecutivesDigital Forensics, eDiscovery & Technology Risks for HR Executives
Digital Forensics, eDiscovery & Technology Risks for HR ExecutivesThe Lorenzi Group
 
Active Network Monitoring brings Peace of Mind
Active Network Monitoring brings Peace of MindActive Network Monitoring brings Peace of Mind
Active Network Monitoring brings Peace of MindThe Lorenzi Group
 
Introduction to the Epsilon Data Breach
Introduction to the Epsilon Data BreachIntroduction to the Epsilon Data Breach
Introduction to the Epsilon Data BreachThe Lorenzi Group
 

Mehr von The Lorenzi Group (16)

ROAR in Real Like: Heartbeat Helper
ROAR in Real Like: Heartbeat HelperROAR in Real Like: Heartbeat Helper
ROAR in Real Like: Heartbeat Helper
 
Why ROAR makes CENTS: An Insiders Guide to Saving Clients Money (While Protec...
Why ROAR makes CENTS: An Insiders Guide to Saving Clients Money (While Protec...Why ROAR makes CENTS: An Insiders Guide to Saving Clients Money (While Protec...
Why ROAR makes CENTS: An Insiders Guide to Saving Clients Money (While Protec...
 
The Many Faces of SHIELD
The Many Faces of SHIELDThe Many Faces of SHIELD
The Many Faces of SHIELD
 
ROAR Provides Peace of Mind in Digital Enviroments
ROAR Provides Peace of Mind in Digital EnviromentsROAR Provides Peace of Mind in Digital Enviroments
ROAR Provides Peace of Mind in Digital Enviroments
 
ROARing Compliance
ROARing ComplianceROARing Compliance
ROARing Compliance
 
ROAR in Real Life: Picture Perfect
ROAR in Real Life: Picture PerfectROAR in Real Life: Picture Perfect
ROAR in Real Life: Picture Perfect
 
ROAR in Pictures: Biking
ROAR in Pictures: BikingROAR in Pictures: Biking
ROAR in Pictures: Biking
 
DDoS Explained
DDoS ExplainedDDoS Explained
DDoS Explained
 
Digital Forensics: The Employees' Dilemma
Digital Forensics: The Employees' DilemmaDigital Forensics: The Employees' Dilemma
Digital Forensics: The Employees' Dilemma
 
Rising Cost of Child Porn Defense
Rising Cost of Child Porn DefenseRising Cost of Child Porn Defense
Rising Cost of Child Porn Defense
 
Security Analytics for Certified Fraud Examiners
Security Analytics for Certified Fraud ExaminersSecurity Analytics for Certified Fraud Examiners
Security Analytics for Certified Fraud Examiners
 
Digital Forensics, eDiscovery & Technology Risks for HR Executives
Digital Forensics, eDiscovery & Technology Risks for HR ExecutivesDigital Forensics, eDiscovery & Technology Risks for HR Executives
Digital Forensics, eDiscovery & Technology Risks for HR Executives
 
Active Network Monitoring brings Peace of Mind
Active Network Monitoring brings Peace of MindActive Network Monitoring brings Peace of Mind
Active Network Monitoring brings Peace of Mind
 
Introduction to the Epsilon Data Breach
Introduction to the Epsilon Data BreachIntroduction to the Epsilon Data Breach
Introduction to the Epsilon Data Breach
 
Sex, Crime, & Online Slime
Sex, Crime, & Online SlimeSex, Crime, & Online Slime
Sex, Crime, & Online Slime
 
Productivity 3.0
Productivity 3.0Productivity 3.0
Productivity 3.0
 

Kürzlich hochgeladen

"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek SchlawackFwdays
 
From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .Alan Dix
 
Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 365Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 3652toLead Limited
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxLoriGlavin3
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Mark Simos
 
Developer Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLDeveloper Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLScyllaDB
 
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxThe State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxLoriGlavin3
 
Generative AI for Technical Writer or Information Developers
Generative AI for Technical Writer or Information DevelopersGenerative AI for Technical Writer or Information Developers
Generative AI for Technical Writer or Information DevelopersRaghuram Pandurangan
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
Gen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdfGen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdfAddepto
 
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxPasskey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxLoriGlavin3
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteDianaGray10
 
DSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningDSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningLars Bell
 
Unleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubUnleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubKalema Edgar
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024Lonnie McRorey
 
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxLoriGlavin3
 
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024BookNet Canada
 
Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!Commit University
 
How to write a Business Continuity Plan
How to write a Business Continuity PlanHow to write a Business Continuity Plan
How to write a Business Continuity PlanDatabarracks
 

Kürzlich hochgeladen (20)

"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
 
From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .
 
Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 365Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 365
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
 
Developer Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLDeveloper Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQL
 
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxThe State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptx
 
Generative AI for Technical Writer or Information Developers
Generative AI for Technical Writer or Information DevelopersGenerative AI for Technical Writer or Information Developers
Generative AI for Technical Writer or Information Developers
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
Gen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdfGen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdf
 
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxPasskey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test Suite
 
DSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningDSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine Tuning
 
Unleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubUnleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding Club
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024
 
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
 
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
 
Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!
 
How to write a Business Continuity Plan
How to write a Business Continuity PlanHow to write a Business Continuity Plan
How to write a Business Continuity Plan
 

Digital Forensics & eDiscovery for the Financial Executive

  • 1. FEI – Western Mass Digital Forensics & eDiscovery (the Ba$ic$) The Lorenzi Group (c) 2012 - The Lorenzi Group LLC – All Rights Reserved 1
  • 2. Employee Lawsuits Median Employer Cost: $326,640.00 (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 3. FCPA Mean Average Fine (2011) $20,000,000.00 (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 4. Internal Investigations SKYROCKETING Up an average or 50% across all sectors Larger companies using more frequently MITIGATION is the Goal (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 5. Metadata What is it? Examples you know (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 6. Electronic Information Documents Emails Instant Messages Videos (Skype) Maybe even voicemails….. Computers, smartphones, copiers, Xbox, Cars… and coming soon to a refrigerator near you! (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 7. Data Not words in a book; Cheese on a pizza! (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 8. Digital Forensics: The Process Digital Forensics Using a 35MM Camera Create a FORENSIC Load Film & Take Image Pictures Process Image (Data Develop Film Carve & Index) Analyze Data, Search Decide which Pictures Terms, etc you like Reporting & Testimony Scrapbook Photo Album (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 9. Your WORST Nightmare SPOLIATION What is the fastest way to “win” a lawsuit? Drive up eDiscovery costs! *NOTE: The only ones who “win” lawsuits are the lawyers! (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 10. Ounce of Prevention Planning mitigates costs Data segregation Vendor strategy Data & User Monitoring (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 11. Proactive “Forensics” Doc’s, Email, IM’s, Skype (video calls), etc. Resource/Program Usage User Activity/In-Activity Document Access & Changes Website Visits File Transfers, CD Burns, USB Thumbdrives More (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 12. Cost Justification 1. Segregated data saves Time, Money, & Scope 2. Vendor Action Plans can reduce costs by 20% 3. Data & User Monitoring 40% Online Fraud is EMPLOYEE driven! Employees SELF REPORT 1-3 hours of wasted time at work. (Salary.com Inc 11/19/2010) What isn’t being self reported??? 15 minutes of increased productivity = 2.5% (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 13. From eDisaster to eDiscovery Digital Forensics is the 1st step E-Discovery Converting paper Results of Digital Forensics Review for Privilege & Relevancy Mark & Share (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 14. Reality This is not going away…… (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 15. Doesn’t NEED to be Expensive Expensive is a relative term…. Planning ahead, saves more money than time If it can be captured, it will be asked for (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 16. Cost Saving Tips & Tricks Be LIBERAL on Preservation, CONSERVATIVE on Restoration It is NOT “all or nothing” (unless you wait too long) The hidden killer is Monthly Storage Fees Demand Flat Rates & Fixed Pricing whenever possible Push vendors to work together (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 17. Digital Forensics Costs Preservation: < $1000 per Image Restoration: $500 per Image Data Extraction & Analysis: $4-5K per Image Deposition & Testimony not included Budget $6K per media imaged Make hard decisions @ $3K (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 18. eDiscovery Costs Varies Widely STOP paying by GB (gigabyte)!! Pay Hourly or Fixed Price – Savings are in the 70% range… sometimes more Online Hosting is expensive, but MAY be cheaper than in-house Expect to pay $5-10K per media image, push for $10K Total (DiFo & eD) (c) 2012 - The Lorenzi Group LLC – All Rights Reserved
  • 19. Q&A Robert Fitzgerald The Lorenzi Group www.thelorenzigroup.com 866-632-9880 x123 (c) 2012 - The Lorenzi Group LLC – All Rights Reserved