You suspect a leak.You need findings.
We help assess whether the available material supports a concern about an information leak or misconduct. We examine the possible sequence, access to information and unresolved questions without prejudging an individual’s responsibility.
From concern to question
A concern may arise from discrepancies in records, unexpected access or conflicting accounts. We first establish what was observed and which alternative explanations need examination.
Connecting the work
Methods follow an assessment of the material. Not every matter requires every service.
- Internal investigation: documents, accounts and people’s roles.
- Digital forensics / DFIR: account and device activity and timestamp analysis.
- Digital exposure: information already available externally.
- Operational security: risk assessment and limiting further disclosures.
What you receive
An agreed assessment of findings, their basis and confidence, the possible sequence of events and unresolved questions. Recommendations may concern further verification or reducing exposure.
Limits of the assessment
Account use does not establish an individual’s responsibility. A missing trace does not automatically confirm or rule out a leak. We also consider error, accidental disclosure and limitations in the available material.
The first conversation
Describe the concern and the decision you need to make. We will agree how material should be shared and preserved. A general description is enough for the contact form.