Security Investigations

The Need to Understand and Resolve

It is probable that on any given day there is at least one breach of security protocol within an organisation. Most are probably minor in nature, but on some occasions the breach is such, whether it’s the compromise of sensitive information or the loss of critical infrastructure, that it demands an investigation.

Security investigations are not the same as police investigations in that evidence is not being gathered for a criminal proseceution. What is being gathered and analysed is information that leads to an understanding of why a breach occurred, the counter compromise action that should be taken, together with recommendations to reduce the possibility of re-occurrence.

Initial Contact

From the point of the initial contact with RedLeaf Consultancy the nature of the breach would be established and the scope of the investigation agreed. This would include the planning phase, with the most immediate contacts made, timings coordinated and relevant information, whether that is policies, procedures or any threat assessments being shared.