ISS Forensics
EN/ΕΛ

BEFORE THE NEXT STEP

Pre-dispute technical assessment

Understand available digital sources, gaps and preservation needs before the next step.

Before court proceedings or other action, we assess the available digital sources and technical questions with you and, where needed, your lawyer. We identify what can be examined, where gaps exist and which material needs timely preservation.

The initial assessment provides a clear proposed scope: sources, collection priorities, limitations and next steps. Where a full forensic examination or independent review of an existing report is needed, this is agreed separately.

Questions this examination can help answer

  • Which digital sources relate to the questions?
  • Which material may be lost through retention limits?
  • What evidence is missing and could be requested?
  • What is a proportionate next step for technical examination?

What the evidence can and cannot establish

This is a technical assessment based on the material provided. It is not legal advice, a full expert examination or a prediction of the outcome of a dispute.

Our examinations are independent and objective. We report material findings whether they support or challenge the position under examination. We explain what the digital evidence supports, the limitations that apply and what cannot be established.

Before you instruct us

What is needed for the initial discussion?

A general description, the technical questions and relevant sources are enough for the first contact. We agree a secure transfer method and authorisation before examination.

What does a forensic report include?

The report addresses the agreed questions and identifies the material examined, methods, significant findings, supporting references and limitations. It separates observations from technical interpretation. Timelines and exhibits may accompany the report where relevant. A discussion with your lawyer and court testimony can be arranged where required and agreed.

THE APPROACH

A traceable process.
From source to finding.

A defensible finding needs a traceable basis. We document the acquisition, tools, procedures and limitations so that the examination and its conclusions can be independently assessed.

  1. 01

    Define

    Agree the authority, questions, relevant sources and scope with you and your legal adviser before examination begins.

  2. 02

    Preserve

    Document receipt, handling and transfers. Preserve source material and use verified forensic copies or appropriate exports wherever practicable. Record acquisition methods and appropriate integrity checks, including cryptographic hashes where applicable.

  3. 03

    Examine

    Check material findings against their sources. Correlate records and timelines, test alternative explanations and document examination coverage.

  4. 04

    Explain

    Report findings objectively. Distinguish observations, interpretation and limitations, with references that allow the reasoning to be followed.

A keyword result or a device event needs context. Our conclusions reflect the available evidence and the limits of the examination.

LET’S START WITH YOUR QUESTION

Make sense of
your digital evidence.

Tell us briefly about the matter and the digital sources involved. We can discuss the appropriate next step and the proposed scope.

Based in Cyprus · English & Greek

WHATSAPPChat on WhatsAppEMAILmavros@iss.com.cyCALL+357 95 111555

Keep your initial enquiry general. Evidence transfer can be arranged after authority and scope are agreed.

WhatsApp