You are working as Computer Forensics investigator and are called by the owner of an accounting firm to investigate possible computer abuse by one of the firm's employees. You meet with the owner of…

Question

Options

• AInform the owner that conducting an investigation without a policy is not a problem because the
• BInform the owner that conducting an investigation without a policy is a violation of the 4th
• CInform the owner that conducting an investigation without a policy is a violation of the employees'
• DInform the owner that conducting an investigation without a policy is not a problem because a

• A
  12% (6)
• B
  6% (3)
• C
  78% (38)
• D
  4% (2)

Explanation

Without a published Acceptable Use Policy (AUP) or a notice reserving the right to inspect computing assets, employees maintain a reasonable expectation of privacy on company systems. Conducting an investigation under these conditions risks violating the employees' privacy rights and could render any collected evidence inadmissible. Best practice requires that organizations publish clear policies stating systems are subject to monitoring and inspection. Investigators should advise the owner to consult legal counsel and establish such a policy before proceeding.

No community discussion yet for this question.