Digital Forensics Services
A KPMG SERVICE FOR G-CLOUD VII
October 2015
© 2015 KPMG LLP, a UK limited liability partnership and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved.
1
Digital Forensics
Services
KPMG PROVIDES RELIABLE END TO END
COMPUTER FORENSIC AND EXPERT
WITNESS SERVICES
We bring together Data Collection, Evidence
Handling, Processing, Analysis, Reporting and
Testimony to corporate, legal and government
organisations.
We have extensive experience in collecting and analysing material from a broad range of electronic data sources utilised by our clients including desktop PCs, laptop computers, servers, backup tapes, mobile devices and telephony systems.
Our team contains a breadth of Forensic Computing experience, including former Law Enforcement and computer analysts. All of our computer forensic analysts have been trained in the use of recognised Evidential Continuity Procedures and Forensic Computing tools.
Capability
KPMG Forensic Technology professionals provide a wide range of IT forensic services. We use advanced digital evidence recovery techniques to support our investigations in a way that does not compromise the integrity of the evidence. We can investigate breaches of information security policy, IT asset misuse or hacking activities and are experienced at capturing and analysing data from a wide range of electronic
devices, media and sources including desktop and laptop computers, servers, backup tapes, mobile devices and telephony systems. Once the data has been collected, we use our suite of market leading processing and review tools to process, search and analyse that data further. Available solutions include:
Voice technology – we are experienced at
collecting, phonetically key-word searching and reviewing voice data.
Instant Messaging/Bloomberg/Reuters chat data –
we use specialised parsers to facilitate the searching and review of chat data.
Digital Evidence Recovery and Early Case
Assessment tools – these can be used to extract and process large volumes of electronic data and search that data for key words, date ranges, conversation threads, and potentially suspicious patterns. We offer a wide range of specialist tools including Encase, Forensic Technology Toolkit (FTK), Trident Wave, Index Engines, Nuix and many others.
Investigative tools – we use I2 Analyst Notebook, Tableau and NetMap to perform visual analysis and the charting of data. These tools are also
extensively used by law enforcement, intelligence agencies and regulators. Innovative use of these tools can substantially increase the speed and effectiveness of investigations.
Internet Search capabilities and social network
analysis utilising the Envisional technology suite.
Review Platforms – we offer a number of
platforms which facilitate the review of data, including Clearwell and Relativity. These tools facilitate ‘predictive coding’ and enable users to identify key themes, concepts and patterns and thereby review the most relevant data earlier.
Court
experiences
Our experts have given evidence in the UK Crown Court, UK High Court and US Federal Court in both criminal and civil proceedings and for both Prosecution and Defence. They have appeared as forensic experts on Civil search orders, provided
witness statements and affidavits in support of civil applications and attended pre-trial mediation meetings. As a team we have attended court to give oral testimony directly relating to computer forensic matters on more than ten previous occasions, and
continue to do so currently providing expert testimony in both UK Crown Court and in a European court as part of ongoing engagements. The team also attend court to provide testimony regularly in support of wider investigations including acting as Expert Witnesses. In addition to oral testimony we have provided expert reports and witness statements for court in civil litigation and criminal matters on a number of other occasions where we were not called to give evidence due to the clarity and uncontested nature of our findings.
© 2015 KPMG LLP, a UK limited liability partnership and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved.
3
REACTIVE E-DISCOVERY
KPMG’s Forensic Technology team can help you respond to information requests rapidly, cost effectively and securely.
We provide access to a wide range of market-leading technology applications and through the experience, skill and technical capability of our people can help you to reduce disclosure costs, enhance case strategy and manage risk.
How we can help turn risk to advantage
We offer e-Discovery services across the entire
spectrum of the EDRM (Electronic Discovery Reference Model) above and provide a dedicated project manager to guide you through each project’s data collection, processing and review phases.
Our First Response Team secures and collects
data anytime, anywhere. We work with you to ensure that all potentially relevant data is preserved in order to minimise the risk of later challenge.
We provide practical and pragmatic solutions to
reduce the data set to a more manageable size. We process and cull data (including key word search) in many formats and from many sources, including voice, instant messages, cloud and social networking sites.
We will advise you on the technology best suited
to the needs of your case, including data sampling options, early case assessment tools, and suitable review platforms.
We can host the collected data for review at
either our secure data centre or on a mobile solution at your offices.
Potential benefits to you
We can help you reduce risk by:
guiding you on best practice.
providing forensically sound data handling.
We can help you reduce cost by:
providing technology-enabled solutions that are
tailored to your needs and which enable you to focus on the most relevant material quickly and efficiently.
What sets us apart?
Our people have significant experience in providing e-Discovery services to a varied client base including insurer clients, financial services client s and other corporations. We are technology Independent, we offer flexible technology solutions to meet specific client needs. We regularly test the latest
developments to ensure that we offer leading
technology solutions. Our Forensic Technology teams have certified technology specialists who know how to get the best out of the technology to meet the demands of each matter and are able to suggest innovative solutions to ensure that your matter is conducted as efficiently as possible.
PROACTIVE E-DISCOVERY
Information governance is the key to minimising risks and reducing costs in advance of an e-Discovery matter. Our Litigation Readiness assessments involve reviewing the current state of Information Governance for our clients (including Records Retention) and discovery response practices and setting agreed targets based on efficiency and defensibility. We achieve this by identifying the gaps in the current state against the targets and then we support you in implementing our recommendations. When undertaking litigation readiness assessments we utilise our global methodology for discovery readiness. In addition, we also include a review of any existing technology solutions that you may have.
The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavour to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation.
CONTACT US
KPMG G-Cloud Services Team
T +44 (0) 20 7694 8166 E [email protected]
