Internal incidents
Authorised review of records, access, chronology and physical or digital material.
Technical investigation and evidence support for organisations.
The exact scope, source material, intended use and deliverable are confirmed in writing.
Authorised review of records, access, chronology and physical or digital material.
Immediate steps to reduce loss, alteration, contamination or undocumented transfer.
Facts, hypotheses, limitations and practical next actions.
Any conclusion is bounded by the examined material, access, quality, method and stated assumptions.