Question

find an article or case study regarding the misuse of information, or "data misuse." In a 2-3 page paper, explain the situation that occurred within the case. Describe the security practices that should be used to regulate employee behavior and the misuse of information in this situation. Provide recommendations for suitable strategies in the implementation of a security performance measurement program that could be used to prevent these situations from occurring.

Answer 1

An organisation’s in house IT Department had been remotely monitoring the employee for some time; to confirm their suspicions and justify disciplinary action, they immediately employed our computer forensic specialist services.

Paradigm advised the IT Department to leave the computer switched on once the employee had left for the day and not tamper with it as this could damage any evidence making it inadmissible in court under ACPO guidelines should legal action be required.

Paradigm investigators visited the company’s offices after hours, imaged the switched on computer and returned to their premises to carry out digital forensic analysis. Imaging the computer in this way caused minimum disruption for the company, did not alert the employee to the investigation, and yet enabled Paradigm analysts to carry out a thorough investigation.

Subsequent analysis revealed that whilst logged on at work, the employee had indeed viewed indecent images of children; further analysis of the internet browser showed he had also visited websites containing indecent images and had downloaded material from them.

This was communicated in the forensic report to the employer, the employee was subsequently dismissed and the police were informed.

NOTE: As per Chegg policy, I am allowed to answer only 1 question (including sub-parts) on a single post. Kindly post the remaining questions separately and I will try to answer them. Sorry for the inconvenience caused.