Problem
A. Should an organization implement computer forensic procedures before or after a fraud is committed? Explain.
B. Discuss how data found on a suspect's hard drive could be inadmissible as evidence in a court proceeding.
C. Discuss the issues and relevance surrounding email and instant messages as evidence.
D. Discuss Section 802 of the Sarbanes-Oxley Act, Rule 34 of Federal Rules of Civil Procedure, and Rule 26 of the Federal Rules of Discovery as they relate to electronic business records.
E. Discuss four items of good data collection advice to give someone investigating evidence on a suspect's computer.