Type of Project
An oil company’s senior management has reason to suspect that John Smith, one of the
company’s mechanical engineers allegedly took information that was clearly identified as
proprietary. The company’s legal office has requested digital evidence regarding the potential
violation of company policy, which prohibits the sharing of proprietary information without prior
approval. The employee was not authorized to access proprietary information. All employees
sign nondisclosure agreements (NDAs) and acceptable use policies (AUPs). Senior management
and the legal office have approved this request.
You are a member of the investigative team that has been asked to develop an investigative plan
team will implement by doing the following:
and minimize the impact on the organization.
and accepted procedures.
related to the suspected violation of company policy.
evidence that supports the claim of a policy violation.
paraphrased, or summarized.
The submission accurately discusses the
strategy that will be used
to both maximize the collection of
evidence and minimize the impact on the
organization, and the description is based
on forensic best practices or standards.
A2:TOOLS AND TECHNIQUES
The submission accurately describes the tools
and techniques to be used in evidence gathering,
preparation, and analysis, and the description is
based on forensic best practices or standards.
A3:COLLECTION AND PRESERVATION OF EVIDENCE
The submission accurately describes
how required evidence will be collected
and preserved using standardized and
accepted procedures, and the description
is based on forensic best practices or
A4:EXAMINATION OF EVIDENCE
The submission accurately describes how the
seized evidence will be examined to determine
which items are related to the suspected
violation of company policy, and the description
is based on forensic best practices or standards.
A5:APPROACH TO DRAWING CONCLUSIONS
The submission accurately discusses an approach
that will lead to drawing conclusions based on the
digital evidence that supports the claim of policy
violation, and the discussion is based on forensic
best practices or standards.
A6:PRESENTATION OF DETAILS AND CONCLUSIONS
The submission accurately discusses how the
case details and conclusions should be presented
to senior management, and the discussion is
based on forensic best practices or standards
The submission includes in-text citations for sources
that are properly quoted, paraphrased, or summarized
and a reference list that accurately identifies the author,
date, title, and source location as available or the
candidate does not use sources.
Content reflects attention to detail, is organized, and
focuses on the main ideas as prescribed in the task or
chosen by the candidate. Terminology is pertinent, is used
correctly, and effectively conveys the intended meaning.
Mechanics, usage, and grammar promote accurate
interpretation and understanding.
Agreements (NDAs) And Acceptable Use Policies (AUPs)Scenario