investigation-vocab

Evidence Found (1)

Evidence relevant to the incident is found (e.g., fellow employee found a USB drive left in the insider’s computer that had sensitive company files downloaded on to it)

Insider Admits to Activity in Interview (2)

Insider admits to involvement in insider incident while being interviewed by investigators about the incident (or related activity)

Insider’s Residence/Workplace Searched (3)

Investigators search the insider’s home or workplace for evidence related to the incident

Case Opened Internally (4)

The victim organization open a case to investigate the insider

Case Opened with Law Enforcement (5)

Law enforcement opened a case to investigate the insider

Insider Interviewed (6)

Insider is interviewed about the incident by investigators