Discussions

**Answer the following bulleted questions with at least one paragraph for each response. Please see the corresponding E-Activity when necessary.**

Discussion 1: Network Forensics

• Assess the importance of forensics in network-based crimes and incidents. Determine the advantages an investigator gains by having the ability to analyze network-based crimes. Propose how you, as someone in a management position, would emphasize this importance to your organization.

• From the first e-Activity, summarize the article you researched and specify how cyber forensics were utilized to analyze the crime. Provide an example with your response.

**E-Activity- Use the Internet to research and select at least one article involving a cybercrime case where forensics was utilized.

Discussion 2: Email Investigations

• Compare and contrast forensic investigations of email in a client-server environment and webmail environments. Choose which one you believe is the more difficult of these investigations and provide a rationale with your response. Determine if you believe mobile device email has increased the difficulty with email evidence gathering and if you believe this will continue to evolve in the future.

• From the second e-Activity, suppose you are a Chief Information Security Officer (CISO) for a large corporation. Choose what you believe is the greatest concern with email investigations. Conclude whether or not you agree with the authors that speed in preservation is the key to an email investigation. Justify your response.

**E-Activity- Go to the Forensic Focus Website to read the article titled "Email Evidence - Now You See It, Now You Don't!".

Discussion 3: Mobile Device Forensics

• Determine what you believe is the most important piece of evidence that can be retrieved from a mobile device based on the storage capabilities of these devices and justify your response. Identify at least two specific challenges with acquiring this specific evidence from a mobile device.

• From the first e-Activity, thoroughly describe the mobile device forensics tool you researched, including at a minimum its functions, advantages / disadvantages, and cost. Determine whether or not you would consider selecting this tool for use by the employees on your system forensics staff; and whether it could assist them in their investigations. Justify your response.

**E-Activity - Use the Internet to research and select at least one mobile device forensics tool that aids a forensic specialist in an email investigation.

Discussion 4: Bring Your Own Device (BYOD)

• Analyze how the consumerization of Information Technology (IT) is creating challenges for both forensics departments and IT security in general. Describe some of the safeguards, both technical and administrative, that you would put in place in your organization to help mitigate the risks of this phenomenon.

• From the second e-Activity, determine what you believe is the greatest concern with the Bring Your Own Device (BYOD) philosophy and justify your answer. Suppose you are a Chief Information Security Officer (CISO). Explain whether or not you would permit personal devices on the company as part of a BYOD policy and justify your answer.

**E-Activity - Go to the PCWorld Business Center Website to read the article titled "Pros and Cons of Bringing Your Own Device to Work".