Working with Law Enforcement
David A. Land · 2012
This chapter elaborates on why it is important to establish relations with all levels of law enforcement before there is a crisis. It explains how to coordinate efficiently and effectively to support investigation and prosecution of criminals. Working with law enforcement at all levels, both nationally and internationally, is an important aspect of computer security and a collective need of organizations to protect their sites, sites' information, and enterprise infrastructure. The cybercrime paradigm has shifted to one in which organizations need law enforcement and law enforcement needs organizations. The success of both sides demands collaboration and sharing. Understanding the needs and constraints of law enforcement before, during, and after the commission of a cybercrime can significantly enhance an organization's opportunity to come back online quickly, with potentially little or no disturbance to users or customers. The chapter highlights that in examining computer crime laws, it is worthwhile to understand which laws, and which law enforcement agencies, are responsible for responding to organization. The chapter further discusses different law enforcement resources, and elaborates on how to handle evidence and the chain of custody.