Data Preservation

Preserving digital evidence early is a critical first step toward increasing your chances of a successful investigation, litigation, or incident response.

Preserving data is challenging for businesses, law firms, and government agencies given the tremendous volumes, sources, and types of data potentially involved. This sensitive information must also be secured quickly to prevent it from being overwritten, destroyed, or otherwise spoliated. To properly preserve data, you need the right tools and methods to ensure all potentially relevant data is captured and remains intact.

Data preservation is as critical as data is fragile

Hundreds of electronic files change or are overwritten when a computer is simply turned on. Electronic data—including user-created files, RAM memory, internet history, and network logs—is inherently delicate and can be easily modified through the course of business. Proper data preservation practices enable you to capture fragile electronic evidence and, if necessary, obtain a forensic image or “snapshot” for further forensic data analysis. 

Reducing risk through proper preservation

Failure to adhere to strict industry data preservation and collection standards may result in the altering or loss of critical data, exposing you to possible sanctions for spoliation. Kroll offers the most practical and cost-effective approach to identifying electronic data for preservation. Whether preserving the data of a single custodian or identifying data sources across an entire organization, our forensic experts will work closely with you to ensure your data is safely and defensibly preserved.