Performing Computer Forensic Analysis is a very specialized function. There is often debate over training in house staff to perform the work vs. contracting out the work.
On the private sector side this can often be relegated to a matter of money and efficiency. Is there enough “computer forensic analysis” requirements within the company to keep a Computer Forensic Analyst fully trained, equipped and engaged? If there is, hire one, if not contract out. I would suggest that this field is specialized enough that adding this work to your LAN administrator’s job description to perform when required is not an effective option. The tools, techniques and technical environment change rapidly and therefore require a full time commitment to staying current.
My background includes many years working in government. On the public sector side I was firmly in the “keep it in house” camp up until it became clear that internal resources were never going to be adequate to service the demand for this service. In a perfect world there would be enough public sector funds to hire adequate resources, which has not been my experience. In this environment contracting out specialized services can be a viable option.
So what are some of the advantages of contracting out computer forensic analysis?
- You have access to highly trained resources without bearing the cost of training and equipment.
- Response is immediate. Meeting timelines set by you is generally a main factor in accepting a contract. Internal resources can often have other responsibilities or cases which may lead to delay. It’s not unheard of to have some investigations wait up to 2 years for a computer forensic report prepared internally.
- There are generally fewer human resources, personnel concerns when hiring an outside resource as opposed to hiring a fulltime employee. Larger agencies often have issues such as transfer and promotion of internal resources which cause further expense in locating and training new resources.
- Contracting can provide budgetary flexibility. The specialized work is completed without a long term commitment of resources to a full time employee, their wages, benefits etc.
- Contracting out for this service often results in a focused response. Essentially consultants are often able to focus on the job at hand with none of the other distractions that come with being a part of the agency or corporate network. This generally allows for a more efficient response.
- Contracting out can often lead to greater investigative control. The client liaises directly with the consultant and has full control over the investigative timeline, objectives, cost management. Internally, most apparent in public sector agencies, you are subject to the policies and priorities of other levels or units within the agency.
- Computer Forensics is a very specialized field. Consultants in this area are often owner/operator or are compensated within a billable hour’s structure. Successful consultants in this area recognize that their long term self interest lies in producing high quality work efficiently and cost effectively. Human nature being what it is this pressure to produce can often be less prevalent with internal resources who don’t perceive the connection between the job at hand and their long term success.
- Contracting out can also be of benefit in highly technical intricate investigations in reducing or transferring your liability should such an issue arise from the work completed.
Whether you are within a public or private sector agency, due to the nature of computer forensic analysis, contracting out this work should be considered as a viable response option.
Hi there. Thanks for this site. I check it regularly to get the most recent articles.
Good thread. Cheers!!