The Federal Rules of Civil Procedure dictate that reasonable efforts must be made to preserve, collect and produce to adversaries any evidence related to anticipated litigation and where forensic services are typically required. However, civil litigation typically does not require the same order of magnitude as criminal matters, and appropriate tools, processes and economies of scale can be applied to increase speed and reduce cost and risk throughout the process. By combining Iris’ forensic expertise with its experience in electronic discovery—and by working with its clients to determine the specific case needs and potential risks—Iris creates the right defensible forensic solution for each particular matter.

• Providing reliable certified experts
• Using best-of-breed technology and process
• Documenting chain-of-custody
• Testifying to the validity of preservation and collection
• Using tried-and-true methods and protocols

Iris’ Forensic Services Minimize Expense by…

• Designing the right forensic approach based on the needs of each client and matter
• Forensic Culling to funnel out extraneous items
• Not charging travel costs associated with data collections (Travel fees are waived with purchase of both Iris Forensic Services and Electronic Data Discovery processing services 20GB or more.)
• Concurrent imaging of multiple computer systems at once minimizes both cost and disruption

Benefits

Speed. Iris forensic engineers are able to simultaneously image multiple computer systems, effectively doubling or tripling the speed of other service providers. Overall electronic discovery project velocity is further increased by Iris’ Forensic Culling process, which safely and effectively isolates essential data and funnels out the extraneous items.

Cost. Iris understands the balance between eDiscovery and forensics and can design a cost-effective—yet still reasonable and defensible—approach for any matter.  Also, by employing Forensic Culling, Iris can significantly reduce the base population of data that is ultimately subjected to processing, reviewing, hosting and production, reducing overall electronic discovery costs by up to 50% or more.

Defensibility. Iris follows Department of Justice guidelines for the handling of all evidence.  Each step of the discovery process is fully documented and all findings are supported by facts obtained during examinations. Iris’ professionals have a variety of certifications including CCE, CHFI and EnCE. Certified and reliable experts handle all planning and work.

Documentation. For all evidence collected, the chain of custody is properly documented to assure integrity and provide an audit trail back to the original source.  This includes numbering and tagging of evidence, photographing computer systems and relevant components, and thoroughly recording all descriptive details such as the make, model, serial number, employee name, and asset ID that are associated with each device from which evidence is collected.

Security. Iris’ standard best practices for handling evidence include measures to ensure that it is not altered in any way during the collection process and can be safely preserved.  Iris employs the latest advanced tools and software such as write blocking appliances which prevent change or damage to originals.  Specialized forensic tools and processes such as hash comparisons are used to verify that an exact copy is acquired and preserved.

Expert Testimony. Iris’ experts cannot only develop a defensible process based on best practices and the Federal Rules, they will also testify in hearings or in court as to the validity of that process. Iris can also provide expert services to audit and analyze the preservation efforts of opposing parties and provide documentation in support of briefings.

Services
Iris’ Computer Forensic Services include the following disciplines:

• Collection planning
• Data preservation and collection
• Email server mailbox collection & verification
• Evidence custody chain and inventory tracking
• Preliminary forensic culling & filtering
• Deleted file recovery
• Registry analysis
• Declaration and reporting
• Exhibit production
• Computer user profiling
• Data imaging
• Link analysis
• Advanced forensic analysis
• Password decryption
• PDA/Cell phone seizure and data acquisition
• Cellular phone analysis
• Advanced email investigation
• Digital investigation reporting
• Expert testimony

Iris’ Forensic Culling Can Save Up to 50% on Electronic Discovery Costs
Iris provides its clients with cost efficiency in the forensics process by designing a specific solution based on the needs of the client and the matter. In addition, Iris helps its clients save throughout the discovery process by forensically and defensibly culling data.

Forensic Culling reduces the amount of data that must be subsequently processed and searched from custodian hard drives after they’ve been collected and imaged in the field.  Typical forensic reduction only involves the elimination of system files by using NIST or NSRL known system file lists as a guide, but Iris’ Forensic Culling goes beyond traditional de-NISTing to include and isolate other extraneous folders such as program files or IT user accounts.  These can hold large volumes of data that are typically not useful or relevant for electronic discovery review.

For example, the PC may contain a profile which is merely used for IT administrative purposes to store a backup of the installation set or standard package of applications, utilities and shortcuts to resources that are deployed for all users within their organization.  Iris individually can confirm each such case and omit them from the data extractions where appropriate. Typically, less than 50% of the data remains to be forensically extracted, resulting in a greater than 50% reduction in downstream processing, hosting and review costs.

Iris: One Company, One Solution
Iris clients can rely on one provider for all areas of litigation support. Iris has expertise in all phases of discovery, and has experience and proprietary technology for steps that other providers outsource such as computer forensics, filtering, culling and online review. All of Iris’ technologies include flexible interfaces and are scalable enough to handle any size matter, reducing both cost and data risk since data need not be transferred between providers. As a truly international provider—with operations throughout the U.S., Asia and Australia—Iris can handle projects in any language or any international complexity. The result is a single company with a single integrated solution to handle any litigation support need, anytime and anywhere in the world. Iris Data Services: One Company, One Solution.