Hiring Forensic IT Specialists, Ask the Right Questions

Understanding forensic IT specialists' capabilities and defining their roles is critical to a successful engagement. Take these steps to ensure the candidate you're considering is right for the assignment:

* Determine if the engagement will be a matter of information preservation, financial or economic analysis, a review for relevant data captured during the forensic process, or something else.

* Decide the type of specialist you need. Does your case require a vendor relationship, in which the specialist would respond to requests and execute tasks as ordered? Or do you need a consultant who can play a role in setting strategy and establish a productive team environment?

* Verify experience. Ask for references and contact them. Determine if the specialist previously has been qualified as an expert in court. If not, ask about the specialist's experience and work history. Experience managing multiple complex IT systems can be an advantage, especially if your case requires data collection. Work with counsel to determine if the specialist could be qualified as an expert witness in your case based on the facts and circumstances.

* Check for credentials. The International Information Systems Security Certification Consortium offers a Certified Information Systems Security Professional (CISSP) certification that requires a passing score on a written exam plus five years of professional experience in information security or four years of experience and a college degree or certain credentials. A CPA with knowledge of accounting and technology can be certified by the AlCPA as a Certified Information Technology Professional (CITP) based on experience and education in seven technology-related areas.

* Ask about formal and continuing education, including courses the specialist has taken in the past 12 months. Continuing education is essential as the field continues to change rapidly.