Expand mobile version menu

Cyber Detective

Real-Life Activities

Real-Life Decision Making -- Solution

You focus on the issues you were asked to investigate.

This is the real-life decision made by computer forensics expert Michael Spohn. He says he would not report anything that is not within the scope of the investigation. If you were hired specifically to determine if the former VP exited the company with a copy of the customer database, any other information that you come across is none of your business.

"There really is no right answer to this scenario," Spohn says. "Although I tend to stick very close to the scope of my investigations, some investigators tend to feel obligated to report things they discover during their investigations, even if those things are not related to their work."

Spohn says it is very common to find "interesting" information during an investigation. If he reported everything, his reports could be thousands of pages! He also points out that the CEO may not want to know about it. If he felt he had to report the findings to someone, he would choose the network security administrator or some other mid-level manager. Then they can make the decision whether or not the executives are told about it.