Fraud Considerations When Obtaining Data

Chain of evidence

• Must assume in every investigation that may go to a criminal trial
• Fewer times data is handled or converted the better
• IT must operate at high standards, could be called to testify
• All original, intermediate and final files must be maintained in a secure manner
  • MD5 or another proven digital hash for original file recommended

File formats

• PC files - no problem, just import
• Flat files (ASCII, EBCDIC) - not a problem, import
• Complex file formats – IT will need to convert to a flat file format. Be sure you discuss how you want this conversion done. It will then probably need various joins.

Downloading data

• Need totals for meaningful fields, including hash totals
• If not custom for you (e.g. a standard report), be sure you understand how the report is generated. It may be filtered.
• If requesting less than total database, be careful when specifying (USA not the same as U.S.A.)

Source: Turnbull, C. Stephen. Fraud investigation using IDEA. Vancouver, BC, Canada: Ekaros Analytical. pp. 29-50.

- R. S. Kulzick – 5/02/2007 -