In 2001, almost twenty years ago, Update magazine published an article about the Brazilian Institute of Experts highlighting the role of technical and scientific investigation in the cyber world: “The proliferation of content and transactions that migrate to the border territory called the Internet has required the formation of a whole range of new professional categories.”
The renowned Update magazine continues to inform that: “With new activities come new crimes. Thus, lawsuits involving online businesses and information multiply. Courts begin to make new demands. A new market is created: that of ‘cyber-experts’. They are professionals who have a path ahead filled with clues, which does not mean simple, and almost always more expensive than traditional investigations, as it requires cutting-edge knowledge and technology.”
For the Brazilian Institute of Experts in E-commerce and Telematics (IBP Brazil), “those who wish to explore this niche must offer much more than the skill of hackers (system intruders).”
“When setting up the Institute this year, we sought to combine up-to-date information, investigation methods, and serious legal support so that a raised proof is valid and does not imply a privacy invasion,” comments Giuliano Giova, president of the entity.
Update Magazine highlights that the IBP structure is used to support the work of lawyers and legal operators, in addition to serving the corporate market. Until now, “much of the investigations on the Internet have been done in an amateur way, compromising the results of various actions and compensation in case of moral and financial damages.”
The article details relevant aspects to be considered in the examination of cyber crimes, including the issue of breaking confidentiality with providers and the need for judicial authorization. The theme moves on to the issue of dismissing employees from a company after it is discovered they are using corporate email to distribute pornographic photos on the Internet. Issues such as the signing of a specific term at the time of hiring an employee could be considered to support a company’s eventual policy of monitoring employee emails.
“The duration and price of an investigation can vary greatly. Whether to recover documents that serve as proof, prove false identity of senders of messages or verify unauthorized access to networks, among other cases, the work of these professionals requires time, planning and method.”
“With a court order in hand to search for information on a company’s computer, for example, it is necessary to study the configuration of the machine, devise a strategy to not destroy other stored information and act without interrupting work routines.”
One factor that helps and reduces the cost of capturing evidence is the continuous training of employees who have access to the company’s network on topics such as cyber threats, evidence, and technical expertise incidents. Not deleting suspicious emails is one of the guidelines given by IBP to client companies.
(Artigo original publicado em 2001 na Revista Update),
Visitem Amcham Brasil – São Paulo.