An organisation should have a robust and documented internet use policy in place and ensure that staff know what the 'rules' are, as this makes it easier to identify internet misuse and take appropriate disciplinary action. The misuse could be an unacceptable level of personal use during working hours (auction sites, social networking), accessing pornography, installing unauthorised or unlicensed software or running a personal business from work. It is quite common for one type of misuse to be suspected and looked for, only to discover evidence of much more widespread and serious misuse of the internet than was thought to be the case.

Even if the suspect has apparently 'covered their tracks' there is still a great deal of information about internet activity that can be recovered by the application of digital forensic techniques. It's not just about the computer used by the suspect - it's also how that computer is connected to the internet in your organisation.

Aperio DI know where to look and how to recover those records which will demonstrate unacceptable use of the internet if it has taken place, allowing decision makers take appropriate action. As always, early preservation of the relevant computers and storage areas is important. Aperio DI are happy to provide free advice and guidance on the initial actions to be taken based on your paticular circumstances.