CSI generation not right fit for business

CSI, along with other popular TV shows, has created an aura around digital forensics, creating a perception of exciting job prospects, intriguing graduates and those looking for  a career change.

It would seem then that most firms have a number of options, should they be in need of a forensics expert to look into issues with technical security, such as sales books suspected of being stolen by former employees or internal IP leaks.

However, it isn’t working out that way. Courses taken by prospective experts in digital forensics in the last 10 years have emphasised skills in such areas as law enforcement. Most graduates then don’t possess the skill-set required by businesses.

Around 10 years ago, a number of university courses suddenly included the word ‘forensics’ in the title in order to appeal to the CSI generation. However, that trend didn’t last and what we are now left with are undergraduate courses suited for specialists.

People wanting to work in digital forensics need to possess technical expertise in accessing and sorting through an employee’s digital footprint, as well as understanding the legal context, so that businesses steer clear of law breaking during the investigation.

Businesses of any size should not be ignoring the possibility of cyber crime affecting their operations. They should be in a position to investigate patch holes, vulnerabilities and find any lost property.

It is often the members of staff who are the source of many vulnerabilities recognised by security professionals and digital forensics. However, at least one staff member should possess the necessary skills and knowledge to deal with such a problem. This is why it is important that they advertise cyber security jobs – so they have staff in place who will be able to fix the solution rather than cause the problem.

Source: Computer Weekly