The art of preparation: A conversation with investigations expert David Graham

Interviewer: Christopher McNaughton

Guest: David Graham , Investigations Expert,

Christopher McNaughton (CM): Today, we're chatting with David Graham, a renowned expert in the field of investigations, especially in the digital forensics realm. David, thanks for joining us.

David Graham (DG): Pleasure to be here, Chris. It's always great to talk about a subject close to my heart.

CM: Let's dive right in. Why is preparation so critical before beginning an investigation?

DG: Well, Chris, imagine setting off on a bushwalk without a map or compass. You might enjoy the scenery for a while, but soon you'll be lost. Similarly, in investigations, especially those tinged with digital complexities, preparation is your map and compass.

CM: What are the key considerations in this prep phase?

DG: There are several, but let's spotlight a few. First, legal authority and compliance are paramount. Without these, your investigation could be more of a kangaroo in the headlights rather than a kangaroo bounding ahead. Ensuring that you're operating within the legal framework is crucial to avoid future headaches.

CM: Absolutely, legalities are key. What about the scope and purpose?

DG: Spot on, Chris. Defining the purpose and scope of the investigation is like having a clear destination for your bushwalk. It keeps the investigation focused, preventing what we call 'mission creep' - that's when an investigation starts to meander into unrelated territories.

CM: Interesting point. How about the resources needed?

DG: Resources are your backpack of essentials. You need the right tools - digital forensic software, skilled personnel, adequate time - all crucial for a thorough investigation. Think of it like packing for varied weather; you need to be prepared for all scenarios.

CM: Risk assessment and stakeholder involvement?

DG: Ah, two sides of the same coin, really. Risk assessment is about foreseeing potential challenges, such as data loss or legal issues. It's akin to checking the weather forecast and planning your route. Stakeholder involvement ensures everyone who needs to be in the loop, from IT to legal teams, is onboard and informed.

CM: Moving into the investigation, what's key in evidence collection?

DG: Evidence collection is the crux of the matter. It’s about gathering digital breadcrumbs with precision and care, ensuring they lead you to the gingerbread house and not just to a pile of crumbs. Maintaining the integrity of digital evidence is essential for its admissibility in court.

CM: And the importance of maintaining a chain of custody?

DG: Critical, Chris. It's like keeping a detailed travel log of your journey. Every piece of evidence needs a documented history - where it's been, who's handled it, and how it's been stored. This fortifies its credibility.

CM: Your thoughts on analysis and documentation?

DG: Analysis is where the magic happens – decrypting data, analysing digital footprints. It's a blend of science and art. And documentation? It's your expedition diary. It should be comprehensive, detailing every step taken and every discovery made.

CM: In closing, any final thoughts for our readers, particularly those in the investigative field?

DG: Remember, every investigation is a journey. Prepare well, respect the legal landscape, be meticulous in your methods, and stay curious. That's how you uncover truths and maintain integrity in this digital age.

CM: David, thanks for sharing your wisdom with us today. Your insights are as valuable as they are intriguing.

DG: Always a pleasure, Chris. Happy investigating to all!

This conversation with David Graham highlights the multifaceted nature of preparation in investigations, emphasizing legal compliance, clear objectives, resource allocation, risk assessment, and stakeholder involvement. It serves as a reminder that thorough preparation is the cornerstone of successful investigative outcomes, especially in the intricate world of digital forensics.