AmberTec

  Integrity Preserved

 Cybercrime Checklist

Can you answer "yes" to the following questions?


Do you know how to investigate computer misuse?

Do you have an action plan?


Have you identified those who can assist you?


Should you call in outside professional help?


Should you notify the Police and whom in the police should you contact?


Do you know how to preserve evidence or what would be evidence?


Do you have the expertise ‘in house’ to forensically examine a computer?


Do you, or does your agent,
really havethe skills to examine the machine?

Do you understand how to establish exhibit continuity?


Do you understand the law with respect to computer misuse?


Where should the misused machine be examined?


Are you, or is your agent,
happy to explain his examination of the computer to a court?

What notes should you keep?


Can the misused machine be identified?


Is the misuse ongoing?


If the misuse ongoing how should the machine be examined?


If the misuse ongoing how should you deal with the matter?


How should you handle backups and audit trails in a computer misuse situation?


Do you understand the financial implications of your system being misused?


What are the legal implications of your system being misused?


If the Police served a warrant or production order upon you what would you do?


Have you read the ACPO guidelines respecting computer misuse?



Our training course "Investigating IT Misuse in the Organisation" covers all of the above

Click here for details