Wednesday, October 15, 2008, 10/15/2008 07:40:00 AM

To Catch an Electronic Thief

An interesting article in the Legal Tech Newsletter by Ken Stasiak and Dave Kennedy, two consultants with SecureState LLC, an information security assessment and protection firm, concerning what to do if you think your company has been targeted by someone stealing electronic data.

The article looks at three steps in the process of ferreting out the offender: profiling, internal investigation and interrogation.

The authors’ conclusion:

Simply firing an employee suspected of wrongdoing is not appropriate on a variety of levels, most significantly you will likely not recover your data or your funds and the opportunity to do so may be lost forever. For this reason, it is essential to prepare a tactical response plan in advance to address potential problems -- instead of trying to play catch-up after the fact.

That’s a drum we’ve been beating for years and Stasiak and Kennedy are right on.
back to top