Human Resources (HR) investigation of the Director of IT
CASE STUDY
HR Digital Forensics Investigation of IT Director
Tags
Human Resources (HR), Personnel Investigation, Digital Forensics, IT Investigation, Email Analysis, TSCM, bug sweep
Background
Scope
The Maryman team proceeded with a full scope digital forensics investigation to determine if the Director of IT was engaged in any invasion of private information. This was a difficult situation since the Director of IT had full administrative access to the environment. Luckily, there was a new employee working under the Director of IT, who had appropriate credentials but did not have any deep loyalty to the Director of IT yet.
Preservation
Analysis and Findings
Next Steps
The Director of IT was terminated with cause. The Maryman team provided termination support and worked with the new outside IT team to secure the environment to ensure that the former Director of IT no longer had valid credentials or access to the work environment.
Maryman also conducted the Technical Surveillance Counter Measures (TSCM), or bug sweep, specifically to determine if the Director of IT went beyond just spying on female employees’ emails and chats. This included the sweeps of the CEO’s office, the Director of Personnel’s office, as well as the restrooms. It was determined there were no bugs or video cameras placed by the former Director of IT.