Deloitte’s cyber forensics services allow for in-depth investigations into digital evidence using forensically-sound techniques based on industry standards such as ISO 27001 and NIST 800-61. The team has both extensive experience in the field and leading industry certifications, which provide the technical expertise that provides Deloitte’s customers with answers to key tactical and strategic questions related to insider threat, data theft, malware infections, and other advanced threats. In addition, Deloitte’s thorough analytical and reporting methodologies enable the use of cyber forensics material in legal proceedings.

Deloitte’s worldwide presence in 870 locations across 150 countries means that time-sensitive cyber forensics operations can be rapidly carried out using the approach illustrated in the infographic. This process of first contact, collection, examination, and reporting provides a functional framework for cyber forensics.

Your organization informs our team that you have noticed an irregularity in your IT infrastructure.

Our team identifies and collates forensic information (including logs, device images, contextual information, and more) through interviews and technical collection.

Deloitte’s forensic experts perform an investigation based on the data collected in Phase 2. As part of the investigation, our team answers key client questions and identifies measures and recommendations for improving cyber resilience.

We provide a final summary of the findings in the form of a final report or presentation and hold a discussion about the investigation.