Mega Deal Forensic Response Team

Utilizing the Mega Deal scenario, this case study examines the formation of a CFRT within a large corporation in the aftermath of a security breach, detailing policies and procedures for cybercrime scene management. Organizations deploying computer forensic capabilities face numerous challenges in the creation of computer forensic response teams (CFRTs) including financial, legal, regulatory, and human resources. Executive management play a critical role in the formation of the CFRT by exercising due diligence and governance in the establishment of mission and scope for forensic examiners, and authorizing forensic operations within the organization.