Computer forensic examiners are from Mars, attorneys are from Venus
by Keith Chval - Co-founder of Protek - Wednesday, 27 March 2013.
The outcome of high stakes investigations and litigation can often depend on the evidence uncovered through computer forensic investigation. That fact highlights the critical nature of the forensic examiner-attorney relationship at the heart of forensic investigation.

Computer forensic investigations are critical to an enterprise’s response to a wide range of issues faced today, from a departing employee’s theft of proprietary information, to hostile workplace and employment claims, or responses to security breaches.

Ultimately, in all of these situations, the enterprise’s interests boil down to how, or whether, to pursue its rights or defend itself in a legal context. By necessity, a forensic examiner and an attorney will (or should) be working closely together in pursuit of the enterprise’s best interests.

After nearly fifteen years as a prosecutor and litigator, and now computer forensics consultant, I’ve seen and heard enough avoidable examiner-attorney relationship breakdowns to be in a position to offer a bit of counseling in identifying some of the most commonly occurring relationship killers, as well as a little practical advice for avoiding them.

In addition, I also reached out to some of the top flight litigators who we often work with and polled them on what was the first thing that came to mind regarding a frustration experienced when working with a computer forensics consultant. Their answers were illuminating, and many common frustrations were shared by several of the litigators.

Interestingly, many of the common frustrations have more to do with poor communication and a lack of care and nurturing of the examiner-attorney relationship, than with the technical competency of the examiner or her work.

Before there's even an engagement, embrace your purpose in life

It’s not about you! If you want to ensure not only a successful engagement or investigation but also a successful career, recognize that your purpose is to make whoever has brought you to the dance look good - nothing more, nothing less.

A courtroom supervising prosecutor in the county where I started my career used to tell his second and third chair prosecutors that their job was to make him look good. For those who succeeded at their “jobs,” he made sure their careers flourished. Not so much for those who didn’t get with the program.

Apply this mindset to every aspect of your forensic work, and I guarantee that you will have greater professional success than you ever imagined. Several specific examples of how this mindset is applied will follow.

In short, I implore you to approach every aspect of your work by asking yourself two simple questions- How can I make my attorney look good?, and its corollary, How can I make the examiner’s life easier?

Getting it right from the start is critical

The very first stages of an investigation offer critical opportunities for forming a strong working relationship with counsel and establishing a strong foundation upon which a successful investigation can be built. Failure to take advantage of these opportunities will almost assuredly spell disaster and much heartache.

By understanding the essential facts of a case, as well as the legal objectives of the investigation or litigation, an examiner is able to become a strategic partner with counsel rather than just blindly digging out ones and zeroes in a vacuum.

Not only will this contribute to designing a focused, cost-effective examination plan, but the examiner will also understand how her work fits within counsel’s strategies, ensuring that critical evidence isn’t overlooked and allowing for more persuasive work product tailored to counsel’s needs. (How can I make him look good?)

Spotlight

Whitepaper: Zero Trust approach to network security

Posted on 20 November 2014.  |  Zero Trust is an alternative security model that addresses the shortcomings of failing perimeter-centric strategies by removing the assumption of trust.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Fri, Nov 21st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //