CheckIT: quick exploratory investigation for data thieves

CheckIT: quick exploratory investigation tells if your company has a data thief

Computer Forensics has developed a service that quickly identifies if your company is a victim of cyber-crime – which is growing fast

MEDIA RELEASE: 6 July 2016

You have a nagging suspicion something is not quite right. A key staff member who has been with you for many years has just left amid many good wishes to start up in business with a friend. Later, you discover he’s started up in competition with you instead – and taken key clients with him.

The problem is how to solve what is a major and growing issue. Over 108 cyber-crime attacks are now reported daily in New Zealand, according to the latest Symantec Security Threat Report.

Computer Forensics’ MD, Brian Eardley-Wilmot, says his 17-year-old firm has seen a significant jump in cyber-crime this past year – particularly the theft of intellectual property. The case above is an example of this, and involved, as is common, the theft of company data, including client lists and pricing information.

“Such information has been built up over many years. It’s priceless, like family photographs. You really can’t put a price on it,” says Eardley-Wilmot. “And it’s so easy to steal nowadays – you just download data onto a USB stick.”

“Companies frequently know when they have a problem – people’s instincts are usually correct. But managers are loathe to undertake a full investigation before they feel quite sure, because of the cost and disruption.

“To help solve this problem, we’ve developed an exploratory service called CheckIT. This involves getting a brief from management as to what they think is happening. We then perform an exploratory examination on the hard disk or mobile device concerned, then we come back with indicative information that essentially says ‘Yes, you’re right and you should move to a full investigation,’ or ‘No, there isn’t a problem’ as the case maybe.

“If there is no sign of any wrongdoing, then the company has saved the cost of a formal forensic investigation and can be confident that no offence has occurred.

“If we are instructed to conduct a full forensic investigation, to provide incontestable evidence, we are forearmed with the knowledge that the investigation will be successful.”

Eardley-Wilmot says there are four areas where CheckIT© can be used – to both reveal and deter cyber-crime:

- When a key employee resigns and you have concerns

- When incontestable evidence of misconduct is needed

- When an employee is specifically suspected of wrongdoing

- When a random audit of computers and mobile devices can discourage cyber-crime

“CheckIT is a significant advance in the fight against cybercrime, which really is growing fast,” he says.

An earlier report, PricewaterhouseCoopers’ Economic Crime Survey (2016), is well in line with Symantec’s report, confirming cyber-crime has jumped sharply.

PwC’s report says cyber-crime now accounts for almost a third of business frauds, with 40 per cent of New Zealand organisations suffering an economic crime over the past two years – up from 33 per cent in 2014.

“If managers suspect a particular wrongful activity, they can use CheckIT to confirm it,” says Eardley-Wilmot.

“Then they will know for sure whether it’s worth moving to a full forensic investigation.”

* Cyber-crime is defined as any illegal activity using a computer or data storage device. It includes the theft of intellectual property, as well as the misuse of company computers for other purposes.

ENDS

© Scoop Media