nerdexam
GIAC

GCFA · Question #264

Peter works as a Security Administrator for SecureEnet Inc. He observes that the database server of the company has been compromised and the data is stolen. Peter immediately wants to report this crim

The correct answer is B. Local or National office of the US secret service. The U.S. Secret Service has specific statutory authority to investigate computer-related financial crimes and operates Electronic Crimes Task Forces nationwide for this purpose.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Peter works as a Security Administrator for SecureEnet Inc. He observes that the database server of the company has been compromised and the data is stolen. Peter immediately wants to report this crime to the law enforcement authorities. Which of the following organizations looks after the computer crimes investigations in the United States?

Options

  • AFederal Bureau of Investigation
  • BLocal or National office of the US secret service
  • CIncident response team
  • DNational Institute of Standards and Technology

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    83% (25)
  • C
    7% (2)
  • D
    7% (2)

Why each option

The U.S. Secret Service has specific statutory authority to investigate computer-related financial crimes and operates Electronic Crimes Task Forces nationwide for this purpose.

AFederal Bureau of Investigation

While the FBI investigates cybercrime in contexts such as espionage and terrorism, the U.S. Secret Service is the agency specifically designated under 18 U.S.C. Section 1030 for computer fraud investigations including data theft from corporate systems.

BLocal or National office of the US secret serviceCorrect

The U.S. Secret Service holds jurisdiction over computer fraud and related crimes under 18 U.S.C. Section 1030 and operates Electronic Crimes Task Forces (ECTFs) in field offices across the country specifically to investigate electronic and computer crimes. The Secret Service is the designated federal agency for reporting computer crimes involving financial systems, data theft, and infrastructure attacks. Contacting a local or national Secret Service office is the correct step for initiating a federal computer crime investigation.

CIncident response team

An Incident Response Team is an internal organizational unit that manages security events within an organization - it has no law enforcement authority and cannot conduct criminal investigations.

DNational Institute of Standards and Technology

NIST develops cybersecurity frameworks and standards (such as SP 800-61) but is a standards body with no investigative or law enforcement powers over computer crimes.

Concept tested: US Secret Service jurisdiction over computer crime investigation

Source: https://www.secretservice.gov/investigations/cyber

Topics

#law enforcement#cybercrime reporting#US Secret Service#incident escalation

Community Discussion

No community discussion yet for this question.

Full GCFA Practice