Looking Beyond the Breach
When a company’s security practices became the subject of litigation, Aletheian Labs assessed whether its controls, governance, and response efforts were reasonable based on the facts known at the time.
The Challenge
Several years after a Business Email Compromise (BEC) incident, a company became involved in litigation alleging inadequate security practices and an insufficient response to the incident.
The client needed an independent assessment of both its security program and the investigation that followed the compromise. The question was not simply, “what happened?”, but whether the organization’s security measures and response were appropriate given the circumstances at the time.
Our Approach
Aletheian Labs reviewed evidence collected during the original investigation, including forensic data, system records, and documentation related to the organization’s security program. The review also included interviews with personnel involved in security operations and incident response.
The analysis looked at the full picture, including the controls that were in place, how those controls were managed, and how the organization responded once the compromise was discovered.
The Breakthrough
- Evaluated the organization's security controls and governance practices at the time of the incident
- Assessed whether the security measures were reasonable based on the company's size, resources, and risk profile
- Reviewed the investigative steps taken following the compromise and the conclusions that were reached
- Provided an independent expert opinion supported by technical evidence and documentation
- Prepared expert reports and supported counsel through deposition and trial preparation, successfully rebutting opinions provided by the opposing expert
- Helped establish a clear understanding of the facts surrounding both the incident and the response
