Investigate and Respond

In the event of a data breach, Kroll’s cyber investigation teams can help identify the source of the intrusion and evaluate how to best safeguard your system from future attacks. We collect and examine physical and digital evidence to uncover important information about an incident to determine where and when an incident occurred, as well as how it happened. We can determine what data was compromised and whether digital evidence was erased or modified, recover data, and recreate events and exchanges so that you have an accurate diagnosis to develop an effective recovery plan.

Kroll offers a full range of investigative resources for an effective investigation of cybercrime, ranging from data collection and analysis to conducting fraud and internal investigations. We combine computer forensic expertise with traditional investigative methodology, including interviews and surveillance in order to retrace the behavior of people may have had access to protected or proprietary information.

Our cyber investigations experts reflect our multidisciplinary team approach to problem solving. Cyber team members include the industry’s top practitioners from law enforcement, the Department of Justice and private practice who have proven track records for successfully defending expert findings in court or administrative proceedings. We work closely with general counsel, senior executives, audit committees or outside counsel at each stage to explicate forensics data and assure your objectives are met. If requested, we can assemble a case file for referral to a regulator or law enforcement agency or serve as expert witnesses.