IT FORENSICS · BUSINESS

IT Forensics for Businesses – Investigating Internal Matters in a Technically Neutral Manner

As IT forensic experts, we assist companies with the technical investigation of internal matters – from the initial steps in a suspected incident, through cyber-attacks and suspected data breaches, to compliance investigations and evidence presentation in court.

We attach particular importance to ensuring that our approach towards employees is legally sound, that we employ a transparent methodology, and that the documentation produced is usable by the legal department, senior management, the courts or insurance companies.

Impartial fact-finding
Documentation admissible in court
GDPR-compliant processing
Experienced experts

BASICS OF THE STUDY

How an internal IT forensic investigation is carried out

We provide support with the initial steps in handling internal cases of suspected misconduct, suspected data leaks and departing staff, as well as with cyber-attacks, incident response and compliance investigations. Data integrity is documented using cryptographic hash values, ensuring that every step of the investigation remains reproducible and can be verified by staff, the legal department and, where necessary, the courts.

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
We clarify the internal issues and the legal framework – such as co-determination, data protection and personal rights – ideally in consultation with the legal department.
2
Affected systems, devices and logs are backed up in a manner that meets legal requirements; hash values document data integrity throughout the process.
3
Depending on the issue at hand, we investigate suspected data leaks involving departing staff, the point of entry for a cyber attack, or communications data as part of a compliance investigation.
4
The assessment is conducted without preconceptions; incriminating and exonerating findings are presented separately, and employees’ rights are safeguarded at all times.
5
The findings are documented in an expert report that is comprehensible to the management, the legal department, the court or the insurance company.

TYPICAL QUESTIONS

When is an IT forensic investigation advisable for businesses?

  • ✔First steps to take in the event of a suspected case within the organisation
  • ✔Data leaks and trade secrets
  • ✔Leaving staff with access to sensitive data
  • ✔Cyberattacks: Initial access and compromise
  • ✔Incident Response and Recovery
  • ✔Compliance investigations and misconduct by employees
  • ✔Judicial liquidation and independent expert reports
  • ✔Liability and insurance issues following a claim

LIMITATIONS & CONCLUSION

What you should know

We assist companies with the technical investigation of internal matters – ranging from suspected data breaches and cyber-attacks through to compliance investigations and evidence gathering for court proceedings. The assessment under employment, civil or criminal law remains the responsibility of the company and its legal advisers; we provide the independent technical factual basis – without prejudging the outcome and whilst safeguarding employees’ rights.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Do you require external IT forensic support for an internal investigation? LanCologne secures and examines digital evidence in an unbiased, reproducible manner, with documentation that stands up in court.

RELATED TOPICS

You might also be interested in

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

How can a company check whether a departing employee has taken company data with them?
When an employee leaves the company, there may be a suspicion that company data has been copied or transferred. However, the timing alone does not prove that data has been taken.
How can a company have the point of entry for a cyber attack forensically determined?
Phishing, stolen login credentials, exposed services, vulnerabilities and remote maintenance access can all have similar technical consequences.
How can a company analyse email and chat data in a targeted manner, rather than across the board, as part of a compliance investigation?
Communications data may be relevant to issues of corruption, collusion, confidentiality or conflicts of interest, but at the same time contains large amounts of personal information that is not relevant to these matters.
Why should a company’s legal department involve LanCologne at an early stage in a technically oriented internal investigation?
Legal departments need reliable technical facts before they can properly assess their options under employment, civil, data protection or criminal law.

Do you have a specific question about IT forensics for businesses? → View all questions and answers