CyberGuide - Information Security and Cyber Risk Management

Ernst & Young

Shawn Fohs
6 More London Place
London, England SE1 2DA
[email protected]

About Ernst & Young:

From forensic investigations and litigation, to working with regulators, law enforcement, and national security and intelligence agencies, our team has the scale, experience and credibility you need to respond to and recover from a cyber breach in a comprehensive manner.

Our team includes cybersecurity professionals, investigators, digital forensics specialists, eDiscovery professionals, forensic accountants, former prosecutors, regulators and others.

We help companies proactively detect attacks using forensically sound techniques to protect the integrity of evidence and investigation. Our diagnostic services typically include log data analysis, live network log data analysis, live network traffic analysis and host-based forensic analysis.

Our cyber investigative resources combine computer forensic expertise with traditional investigative approaches, including interviewing witnesses, interrogating data, and examining evidence to uncover facts pertaining to a breach. We can determine what data was compromised, whether digital evidence was potentially deleted or modified, recover data and recreate events. These results can be used to refine and further develop other aspects of the cyber response plan.

A complex cyber breach requires extensive investigation to support technical recovery and remediation, as well as all associated legal actions. We work with our clients to co-develop a customized investigation approach for each legal matter, including specific areas of inquiry and potential procedures, experienced resources, timing, work product and budget. As cyber breaches often span international borders with unique data privacy and state secret laws, we tailor our procedures to the specific legal and regulatory requirements of each country involved in the investigation, including our work with counsel.

Survey Answers

Target Client Size
more than $100M
Does US business in
Northeast, Southeast, Midwest, Southwest, West
Does international business in
Canada, Continental Europe, Asia, South America, Africa, Australia/New Zealand, Mexico, United Kingdom
Primary Service Offering
Forensics & cyber investigations
Number of employees
more than 1000
Company Founded
How many network security cases has your company worked on?
In the last year we have provided forensics & cyber investigations services to 500 of our clients however our overall client base is much larger.
How many cyber insurance claims has your company worked on?
50+ engagments in the prior year have involved cyber insurance claims