The methodology used for securing and processing digital information must meet a number of conditions in order to make it admissible as legal and reliable evidence in court cases. For example, the integrity of the digital evidence must be preserved and the evidence be fully reproducible.
The report is the final product of the study and contains a clear management summary and substantiated conclusion. Naturally, our specialists’ technical findings are also part of this report.
Following an incident, it is important to establish exactly what happened and what caused it, for a number of reasons. If an incident has to do with personal data, investigation is compulsory under European privacy law. The main rules for the handling of personal data in the Netherlands are laid down in the General Data Protection Regulation (GDPR).
In the event of an incident, important questions include:
- What is the cause of this incident?
- How long has this been going on?
- What systems and what data are involved?
- Is intent or negligence involved?