The Forensic First Responder is the first person to receive notification or to be on the scene of an event.  Castleforce is able to offer first responder services to your organization and provide a professionally certified computer forensic investigator on site to investigate the situation and to preserve any evidence.

Castleforce follow strict quality assurance guidelines which include the use of an auditable trail and peer approved processes to ensure the integrity and continuity of the evidence is maintained. This means the accuracy of the copied data is verified and every step of the analysis fully documented in strict adherence to the Association of Chief Police Officers (ACPO) guidelines for the handling of computer based evidence.

ACPO Good Practice Guide for Computer based Electronic Evidence 

If you believe there has been an incident involving a computer within your organisation please try to follow the instructions below in order to preserve any evidence:

• Secure the scene, make it safe and DO NOT access any computer files
• If the computer is switched off leave it switched off
• If the computer is switched on DO NOT attempt to access the computer
• If you reasonably believe the computer could be destroying any evidence immediately pull the power cord to shut down the computer

Unless your IT department has the specialist forensic tools and experience based on ACPO guidelines there is a risk of damaging any evidence which could render it useless in a court of law or at an employment tribunal.