Information Forensics

Security Testing, Audit & Compliance

NGS Secure's experienced forensic specialists have government security clearance (SC and DV) and are qualified to undertake work for public and private sector clients alike.

Investigative Forensic Services

Security Incident Response: In the aftermath of a security incident you need a quick response and accurate identification. Our Security Incident Response service helps you resolve your network incidents in a consistent and methodologically driven way. Through a combination of evidence protection, and forensically sound investigation we can determine how the breach occurred and identify (where possible) who may be responsible. We can even arrange for a 24-hour response to provide on-the-spot advice on how best to deal with a breach at the point of discovery.

Malware Investigation: As one of the organisations listed by The Security Service (or MI5) as being able to assist in malware investigations, we have a proven methodology in determining and quantifying your exposure to targeted malware attacks. We can also provide advice and support on remediation where attacks are confirmed as well as liaise with any authorities where appropriate.

Credit Card Fraud: Our PCI QSAs are experienced in undertaking investigations into security breaches pertaining to the PCI Data Security Standard (PCI DSS). We can assist a card scheme member with their enquiry into an account data compromise, follow PCI DSS guidelines, scope for forensic investigation and utilise PCI DSS’ incident report template. Using a combination of these services we will respond to an incident and undertake all the necessary investigations or liaisons with acquirers and card brands.

Litigation Support Services

Computer Misuse: This service typically involves the investigation of a particular member of staff and their abuse (or misuse) of company resources. During such investigations, our consultants analyse data from a wide range of digital devices including mobile phones, laptops, desktops and servers in order to detect and secure evidence of the abuse. Throughout the process we follow the ACPO (Association of Chief Police Officers) guidelines to ensure the admissibility in court of any evidence gathered.

E-Discovery: Our E-Discovery offering is specifically aimed at large enterprise clients and legal firms. We have a specialised team of forensic investigators who are experts in the use of secure imaging tools and procedures, including highly specialised software that rapidly sifts through huge volumes of ESI (Electronically Stored Information) in search of keywords, date ranges and file hashes. Through the use of this we are able to offer hosted review services to allow your team to work through the culled data remotely; flagging items in accordance with your specific case requirements. Responsive documents may also be redacted or highlighted as required. When we recover data from SAN/NAS systems, email servers, archive data sources, mobile devices and even desktop storage, we are able to find, filter, categorise and present the data in a manner which fully complies with legal requirements and is easy to review by in-house or external legal teams.

Expert Witness: Where such an investigation leads to, or supports a court case, our team has the expertise and rigour of process to act as an expert witness. Often proceeded by one of our other forensic services our Expert Witness Service draws upon the core skills of our information security specialists within NGS Secure, many of whom belong to The UK Register of Expert Witnesses. Having gathered evidence in a manner compliant with the ACPO guidelines, when we act as an expert witness it is clear that we have the qualifications, experience, and crucially the gravitas to present in court.

Forensic Readiness Assessment & Planning

Securing electronic information and the subsequent analysis of it, is now a pre-requisite for investigations of suspected abuse/misuse, e-discovery requests and network attacks. Through our Forensic Readiness Assessment & Planning we can help you be prepared for any investigative situation. This service involves a detailed review of your organisation’s readiness to undertake or support a digital forensics investigation, be this as part of an internal investigation or as the result of a compliance requirement.

Hand Held Device Review

Our forensic specialists are experts in the secure analysis of digital media and Electronically Stored Information, (ESI), and are able to recover data in a manner which complies fully with the Association of Chief Police Officers (ACPO) guidelines.

We can provide investigators with all of the evidential data which may be contained on the device. This could include images, web-based email, and chat logs plus any other data that the user may have copied onto the device, including copyright protected data. We can also provide the data in a number of different formats to allow for ease of inclusion in litigation review solutions.