Preservation

Aim: When duty to preserve is triggered, promptly isolate and protect potentially relevant data in ways that are: legally defensible; reasonable; proportionate; efficient; auditable; broad but tailored; mitigate risks.

Ensuring that ESI is protected against inappropriate alteration or destruction.

As Incident Response experts with years of experience, IRS can support you in identifying likely sources of relevant electronically stored information (ESI). Further, we can liaise with the relevant IT providers and advise them on what measures will preserve evidence in a forensically sound way, and how to target their preservation efforts in a way which prioritises volatile ESI first.