CFC Company Profile PDF

COMPUTER FORENSICS CONSULT CFC COMPANY PR OFILE Regional Pione er s in Cyber Se curity & Fo rens ics - 20+ Year s of Dedicat ed Ser vice [2004 - Date ] P. O Bo x 12 8 3 1 0 , Ak a m w e s i , Ky e b a n d o , Ka m p a l a Ug a n d a i n f o @ f o r e n s i c s. c o. u g | +2 5 6 77 4 02 4 5 0 8 ww...

COMPUTER FORENSICS CONSULT CFC COMPANY PR OFILE Regional Pione er s in Cyber Se curity & Fo rens ics - 20+ Year s of Dedicat ed Ser vice [2004 - Date ] P. O Bo x 12 8 3 1 0 , Ak a m w e s i , Ky e b a n d o , Ka m p a l a Ug a n d a i n f o @ f o r e n s i c s. c o. u g | +2 5 6 77 4 02 4 5 0 8 www.forensics.co.ug  TABLE OF CONTENTS 1.0 INTRODUCTION............................................................................................................ 2 2.0 EXECUTIVE SUMMARY............................................................................................... 4 1.1 Strategic objectives.................................................................................................................................4 1.2 Mission....................................................................................................................................................4 3.0 COMPANY REGISTRATION....................................................................................... 5 Legal Status...........................................................................................................................................................5 4.0 OUR SERVICES............................................................................................................... 5 ISO AUDIT. TRAINING & CERTIFICATION...............................................................................................................5 About PECB............................................................................................................................................................6 Data Recovery.......................................................................................................................................................8 Computer Forensics & Litigation Support.............................................................................................................8 Penetration Testing, IT Audits and Security Advisory.........................................................................................10 ICT Solutions and Consultancy............................................................................................................................10 Physical Security..................................................................................................................................................10 Intelligent Law Enforcement Systems.................................................................................................................11 Remote Monitoring and Control.........................................................................................................................11 Enterprise Resource Planning (ERP) solutions....................................................................................................11 Automation, Monitoring, Collaboration and Information Sharing Systems (the AMCIS Project).......................12 Data Visualization & Analytics.............................................................................................................................13 SUMMARY.............................................................................................................................. 24 ~1~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug 1.0 INTRODUCTION Computer Forensics Consult (CFC) takes pride in being the Pioneer in the field of digital forensics and information security management in East & Southern Africa, with extensive experience and having executed several digital forensics-based projects over the years. Registered in 2004, we have over eighteen (18+) years’ experience providing consultancy services in the public and private sector including the Financial Services Sector in Uganda. We have regularly been engaged by the Law enforcement arm of Government in a leading role on numerous cybercrime and computer forensics investigations and prosecutions. CFC offers expertise in the fields of information security management following the ISO 27000 Information Security Management System series of standards, disaster recovery, computer forensics, electronic discovery and litigation support services in the growing area of Cyber Security. We also provide information security related training, often featuring in specialized capacity building efforts, for example to members of the Justice Law and Order Sector in Uganda, the Judicial Studies Institute, Financial Services Sector, Office of the Auditor General and many more. We have since expanded our portfolio to include a host of products & services and are constantly researching and innovating in novel technologies. For example, we design and develop customized systems that incorporate recent advancements in machine learning, artificial intelligence and more. We are also currently the authorized Gold Partner of PECB (Professional Evaluation & Professional Board) a global certification body for persons, management systems and products on a wide range of international standards. This partnership allows up to bring the same training, audit and certification experience covering several ISO standards in areas of Information Security Management, Quality, Occupational Health and Safety, Energy, Transport and much more locally, and gives us direct access to a global network of over 920+ ISO Certified consultants (Lead Implementers & Auditors) and trainers in over 77 countries worldwide to help us deliver on any projects you may require. Listed below is a summary of the services we provide: ~2~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug  ISO C E R T I F I C A T I O N T R A I N I N G A N D A U D I T DATA RECOVERY DITIGAL FORENSICS & LITIGATION SUPPORT PENETRATION TESTING, INFORMATION SECURITY AUDITS AND ADVISORY ICT SOLUTIONS AND CONSULTANCY PHYSICAL SECURITY INTELLIGENT LAW ENFORCEMENT SYSTEMS REMOTE MONITORING AND CONTROL ENTERPRISE RESOURCE PLANNING (ERP) SOLUTIONS AUTOMATION, MONITORING, COLLABORATION, AND INFORMATION SHARING SYSTEMS (THE AMCIS PROJECT) DATA VISUALIZATION & ANALYTICS ~3~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug 2.0 EXECUTIVE SUMMARY 1.1 S TRATEGIC OBJECTIVES Our business strategy revolves around the need to provide highly differentiating services to our customers through the provision of unique, specialized solutions that cater to every client’s needs. The following are our main objectives: Establish Computer Forensics Consult as an industry leader in Hi-Tech Crime Investigations, Digital Forensics and Information, Communications and Telecommunications Technologies (ICT) Security Management. To regularly Pioneer State of the Art Innovative technology-based solutions that add value to the primary sectors of the economy. Establish permanent strategic partnerships and increase our client base through superior performance and word-of-mouth referrals. Continually champion capacity building programmes and initiatives that aim to fortify our National Security / Critical Information Infrastructure Institutions (CIIs) as defined in the NISF, and promote awareness, particularly stakeholders in the justice, law and order (JLOS) sector, on the tools and techniques to combat computer aided crime. Be an intellectual and social asset to the community and environment. 1.2 M ISSION Our mission is pioneer the establishment of the gold standard for ICT solution provision in the areas of digital forensics and information security management that will enable our company to become a leader through: Provision of a personal and professional service paying special attention to detail with the goal of exceeding the expectations of our clients. Establishing trust with existing clients in order to develop a repeat client base by providing confidential, reliable, and uncompromising service. Skill and depth of knowledge: This dictates that we have in place the latest technology and carefully selected highly trained personnel. ~4~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug  Leverage from a large pool of expertise: The Company maintains alliances and consulting partnerships with established reputable ICT security and forensics firms worldwide. Drawing from the intellectual capability and skills they have developed from years of experience will prove invaluable to us as we continually seek to perfect our craft. 3.0 COMPANY REGISTRATION L EGAL S TATUS Computer Forensics Consult was fully registered in 2004 by the Registrar of Companies in Kampala, Uganda. CFC is also registered as an ICT solutions provision company in Rwanda as of March 2010. Our liaison offices are situated at Plot 63 Bukoto Street, Kamwokya P.O. Box 40098 Kampala Uganda. 4.0 OUR SERVICES Listed below is a brief of the main services we provide: ISO AUDIT. TRAINING & CERTIFICATION CFC is currently the authorized gold partner of PECB (Professional Evaluation & Professional Board) in the region. Our partnership allows up to bring the same management systems training, audit, and certification experience locally and gives us access to a global network of over 920+ Certified consultants (Lead Implementers & Auditors) and trainers worldwide to help us deliver on any ISO certification project. CFC is also in partnership with Makerere University Center for Innovation and Professional Skills Development (CIPSD), to deliver ISO certification trainings regularly at the College of Computing and Information Sciences (COCIS) covering over 50 standards in multiple domains including Health Safety and Environment (HSE), Governance Risk & Compliance (GRC), IT Security, Information Security Management, Continuity Resilience & Recovery, Service Management, Quality ~5~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug Management and more. We have since 2018, certified over one hundred and twenty (120) individuals in several ISO management system standards. CFC is working to build capacity in both the government and private sector championing subsidized programs where organizations receive ISO implementation support with the goal of aligning their businesses and processes to the requirements of various over fifty (50) ISO management systems standards including ISO 9001:2015 Quality Management Systems (QMS), ISO 14001:2015 Environmental Management Systems (EMS) as well as ISO 45001:2018 Occupational Health & Safety Management Systems (OHSMS). Our programs cover all activities required for an organization to fully adopt a mature (integrated) management system prior to certification. For more information on these programs, please visit www.isocertificationuganda.com A BOUT PECB PECB is a global certification body for persons, management systems and products on a wide range of international standards. PECB is distinguished from other bodies operating in the region as the only body accredited by the IAS (International Accreditation Services) to ISO 17024 Requirements for bodies operating certification of persons. PECB offers trainings in the general categories of Governance Risk & Compliance, IT Security, Information Security Management, Continuity Resilience & Recovery, Service Management, Quality Management, Health Safety and Environment among others. The different professional training levels include Introduction, Foundation, Lead Implementer and Lead Auditor. For more information, please visit our website w w w. f o r e n s i c s. c o. u g / i s o - c e r t i f i c a t i o n or go to w w w. i s o c e r t i f i c a t i o n u g a n d a. c o m As a global provider of training, examination, audit and certification services, PECB offers its expertise in multiple fields including, but not limited to Information Security, IT, Business Continuity, Service Management, Quality Management Systems, Risk & Management, Health Safety & Environment. PECB helps professionals and organizations show commitment and competence with internationally recognized standards by providing this assurance through ~6~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug education, evaluation and certification against rigorous, internationally recognized competence requirement. PECB’S AFFILIATIONS PECB is an accredited Personnel Certification Body by the International Accreditation Service (IAS) under ISO/IEC 17024 – Requirements for bodies operating certification of persons. PECB is an accredited Management System Certification Body by the International Accreditation Service (IAS) under ISO/IEC 17021 – Requirements for bodies providing audit and certification of management systems. PECB is an accredited Product Certification Agency by International Accreditation Service (IAS) under ISO/IEC 17065 – Requirements for bodies certifying products, processes and services. PECB is an associate member of The Independent Association of Accredited Registrars (IAAR) and a full member of the International Personnel Certification Association (IPC) ~7~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug D ATA R ECOVERY CFC provides advanced recovery of lost data from systems that have suffered bad drive sectors, virus attacks, accidental deletion or reformatting, power failures, system crashes, invalid boot sectors, damaged FAT, MFT and partition information etc. leading to loss of data. We recover lost data from the following media: Hard disk drives from desktops and laptops, Removable media e.g. JAZZ, ZIP, Smart media Digital card readers such as flash cards, memory sticks, PDAs, PCMCIA cards. After recovery, we provide solutions to avert further loss of data to ensure safety of data in the future. C OMPUTER F ORENSICS & L ITIGATION S U PPORT In the corporate world today 90% of all information produced is digital in nature most of which resides on computer systems and networks. Many businesses and companies rely on computers and the Internet for communication, data processing and storage. This has also created opportunities for criminals to use computers and other peripheral devices when carrying out their activities. They use computers as a repository for information relating to crimes or as a tool in committing crimes. Today the prevalent use of computers means much of the prevailing evidence that is sought after in criminal investigations and in litigation is located more and more on personal computers, networks and peripheral devices as electronic documents, files, folders, emails, images, and hidden information such as meta data, transient data etc. The challenge for investigators is to demonstrate conclusively that a particular electronic device contains incriminating evidence. Because digital data can easily be altered and it is often difficult to distinguish between original data and copies, extracting, securing and documenting digital evidence requires special skill. The methods used in collecting and examining digital evidence should in no way compromise the integrity of the data and should, at every stage, enable the examiner to verify its authenticity. ~8~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug Computer Forensics Consult Ltd. emerged in 2004 as a pioneer company focused on providing computer forensics, data recovery and electronic discovery services to institutions and firms such as law firms, financial institutions, governments and private investigation agencies, and corporate companies that require accurate retrieval of evidence from computers. Our consultancy applies to a broad spectrum of applications ranging from designing and deploying networks, penetration tests for network and system audits, applications development for monitoring, evaluation and analysis, site monitoring and environment management for mobile telecommunication operators, intelligent traffic control systems for law enforcement and much more. The field of computer forensics involves identifying, preserving, recovering and analyzing electronic information to use as evidence in court. We provide the skill and technology to enable different individuals and corporations handle electronic evidence for court presentation. Scenarios in which Computer forensics is applied include: Internet abuse Unauthorized access to corporate information and data Industrial espionage Damage assessments Criminal fraud and deception General criminal cases (many criminals simply store information on computers unwittingly) Litigation support. Often during civil cases the court may want to hear testimony of how evidence was handled and analyzed or the opinion of someone well versed in computer forensics. Our team of forensic analysts have excellent working knowledge of what is expected in the courts and therefore carry out their activities ensuring that they are able to withstand the scrutiny of the courts. ~9~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug P ENETRATION T ESTING , IT A UDITS AND S ECURITY A DVISORY An Information Security audit is a technical assessment of a system or application and includes manual and automated assessments ranging from staff interviews, vulnerability scans, reviewing physical and system access controls, to monitoring changes to settings and files on systems. We can help you determine your security exposure, recommend or implement practical solutions to ensure protection of your business assets and critical IT infrastructure. Recent Development: In a bid to help organizations detect security breaches and intruders on their private networks – where Intrusion Detection Systems & Vulnerability Management Solutions fail – we partnered with Canary to bring a simple but extremely effective network appliance that serves as an Early Warning System for APT type attacks, insider threats, crypto-malware attacks and much more. For more information on the Canary Honeypot Device, please visit our website www.forensics.co.ug ICT S OLUTIONS AND C ONSULTANCY CFC also offers ICT solutions and consulting services that help clients assess different fast emerging technologies in order to simplify their business processes. Our solutions incorporate industry-standards hardware and software to address a wide range of business needs. We provide expertise to help organizations plan, implement and maintain the best ICT solution appropriate for their particular business environment. P HYSICAL S ECURITY CFC offers enhanced security solutions as an extension to our forensics arm. These solutions include state of the art CCTV, Access control systems, Automatic Facial recognition systems, Biometric Controls and many more. We also have as part ~ 10 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug of our product portfolio Legal Interception. This is a state-of-the-art ICT interception system for use by Security agencies to aid in investigations as intelligence gathering by interception of both Voice and Data traffic. I NTELLIGENT L AW E NFORCEMENT S YSTEMS CFC is involved in partnership with local Law enforcement agencies such as the Police to provide public safety and security solutions which include among others Traffic management and Surveillance, Automatic Number Plate Recognitions systems (ANPR), Speed Detection and Traffic enforcement and Geographical Information Systems (GIS). R EMOTE M ONITORING AND C ONTROL CFC provides remote environmental monitoring and management solutions particularly to telecom networks for managing their sites’ environment conditions and security efficiently. Our CCTV solution for example, can be integrated into existing site environment management systems to enhance their functionality by providing alternative backup control and surveillance. E NTERPRISE R ESOU RCE P LANNING (ERP) SOLUTIONS Enterprise resource planning (ERP) is an integrated system used to manage internal and external resources including tangible assets, financial resources, materials, and human resources. It is built over a customizable electronic platform with the aim of facilitating flow of information within an organization and provide stakeholders with a dynamic view into the key aspects influencing business growth whether both positively and negatively so appropriate and timely decisions can be made. ~ 11 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug Our ERP Solution is a customizable, Web-browser based application hosted over your local intranet that provides one-stop access to each user's relevant data and tools needed to increase workflow efficiency in work and deliver a solid return on investment. Our EPR solutions offer full automation of; Daily Business Operations Inventory Management Human Resource Management Administration & Finance Customer Relations Management Communication & Collaboration Information Sharing and much more So your organization can deliver business information and processes to employees, customers, suppliers and other business partners making it easy for everyone to locate the information they need in real time. A UTOMATION , M ONITORING , C OLLABORATION AND I NFORMATION S HARING S YSTEMS ( THE AMCIS P ROJECT ) CFC has developed a customizable business information management platform (AMCIS) based on its ERP development experience, which presents a set of capabilities through an online web portal interface that makes it better, faster and easier for business owners and stakeholders to see at a glance what’s happening within an organization in real-time. This system enables users to gain access to critical office and business communications, follow through critical workflow identifying potential bottlenecks in their daily operation environment whenever they need to. It is designed to deliver this access securely and reliably. We extend those capabilities so you can see what is happening in your organization across multiple teams, locations, departments or however you need to see it. ~ 12 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug The AMCIS Product has benefited many SME’s and using an intelligent model developed by CFC, We are able to provide affordable solutions for SME’s using AMCIS allowing them to harness the benefits of a customized Enterprise Resource Planning platform coupled with affordable and flexible payment plans going even as low as US$ 50 per month. At the same time the development of these customized solutions for different SME’s has potential to create at least 250 jobs for people who have no prior IT background knowledge in the field of IT. AMCIS – Affordable ERP solutions for SME’s. D ATA V ISUALIZATION & A N ALYTICS Viewing data using traditional reporting presentations such as spreadsheets, tables etc. may not accurately or instantly bring out the subtleties you need pointed out in order to understand underlying business operations and make quick decisions. An intelligent visualization can help bring out insights that cannot easily be uncovered with traditional statistical analysis of underlying data. Common issues with data processing are it is labor intensive, takes time to process meaning you often get outdated results and presentations may not be impactful. By creating meaningful visualizations you are able to quickly detect changes in expected behavIor and provide strategies for growth. We work with you to dive deep into the areaS of business facing challengeS or needing further insights. We collect data in a non-intrusive way, analyZe the data and deliver a set of visualizations providing insights to address the challenges. We offer this as a service as well as a product I.E. If you need the analysis one- time we deliver the reports as a service. You avail the data and we develop insightful visualizations and reports. However, If you need the analysis regularly, we install Visualization modules in your organization to automatically generate requested reports on schedule. We take data from any source [web, databases, files - binary, text], Analyze and Visualize it tailoring to your specific needs AND Create reports or applications which include real-time dashboards, printable reports accessible through traditional and mobile applications ~ 13 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug We have the EXPERTISE to help businesses solve some of the most complex business problems they face — be it fraud detection, revenue leakage, missed business opportunities, operational efficiency or investment decisions etc. We're non-intrusive. You don't need to invest or change your data infrastructure. We'll plug into your existing systems with negligible load on your INTERNAL serverS. We're fast. Your entire visualization suite will be up and running in a MATTER OF HOURS. ~ 14 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug  APPENDIX SAMPLE PROJECTS Sample ISO Implementation Projects O rg a n i z at io n Date S c o p e & St a n d a rd c o v ere d Bank of Uganda (BoU) 2020 Implementation of ISO 27000 family of Standards – Information Security Management Systems (ISMS) GAUFF Consultants (U) LTD June 2019 – to Date Adoption of an Integrated Management System (IMS) Covering 3 ISO Standards  ISO 9001:2015 QMS  ISO 45001:2018 OHS  ISO 14001:2015 EMS Uganda Police Force (UPF) June – July 2019 Preparation for ISO/IEC 17025:2017 Accreditation for the Forensics Lab ISO Certification Training for all Departments including Top Management of Forensics Directorate  ISO/IEC 17025:2017 Laboratory Management Systems Foundation, Lead Implementers & Lead Auditors  ISO 21500 Lead Project Managers  ISO 9001:2015 Quality Management Systems Uganda Revenue Authority (URA) June 2019 - Date Tax Investigations & Domestic Taxes  ISO/IEC 17025:2017 LMS  ISO 9001:2015 QMS ~ 15 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug   ISO/IEC 27037:2012 e- Forensics National Health Laboratories & December 2021 – Date Adoption of ISO 9001:2015 Quality Diagnostic Services (NHLDS / CPHL) Management Systems QMS National Medical Stores December 2020 – Internal Auditors 2021 ISO 9001:2015 QMS Uganda National Bureau of Standards October 2019 Risk Management & Internal Audit (UNBS) December 2020  ISO 31000 LRM National Information Technology November 2019 Capacity Building Team Authority (NITA - U) ISO 9001:2015 QMS Uganda Police Defense Force (UPDF) – October 2019 IT Department Air Force  ISO/IEC 27001 ISMS National Drug Authority (NDA) October – November Risk Management 2019  ISO 31000 LRM Electricity Regulatory Authority (ERA) October 2019 Corporate Planning Team & Internal December 2020 Audit ISO 9001:2015 QMS Ministry of Energy and Mineral February 2020 ISO 45001:2018 QMS Development TMR International Hospital March 2020 – to Date Adoption of an Integrated Management System (IMS) Covering 3 ISO Standards  ISO 9001:2015 QMS  ISO 45001:2018 OHS  ISO 14001:2015 EMS SAS Hospital Jan 2022 – to Date Adoption of an Integrated Management System (IMS) Covering 3 ISO Standards  ISO 9001:2015 QMS  ISO 45001:2018 OHS  ISO 14001:2015 EMS Makerere University Centre for Health December 2021 – to Management and Population Research Date  ISO 9001:2015 QMS Centenary Bank February 2019 ICT Security  ISO/IEC 27001 ISMS Stabex International Ltd November 2021 – to Adoption of an Integrated Management Date System (IMS)  ISO 9001:2015 QMS ~ 16 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug   ISO 45001:2018 OHS  ISO 14001:2015 EMS Shimizu KonoiKe Joint Venture October – November Health Safety & Environmental (HSE) 2019 Control  ISO 31000 Risk Management AMREF Health Africa October 2019 ICT Department  ISO/IEC 27001 ISMS Butama Hydro Electricity October – November Environmental Office 2019  ISO 45001:2018 OHS Masindi Local Government October 2019 Senior Environmental Specialist  ISO 14001:2015 EMS  ISO 45001:2018 OHSMS KOM Consult October – November Environmental and Social guard 2019 Specialists  ISO 14001:2015 EMS  ISO 45001:2018 OHS Smart Green Consult October – November Environmental and Social guard 2019 Specialist December 2020  ISO 14001:2015 EMS  ISO 45001:2018 OHS Kiryandondo Technical Institute February 2020 ISO 9001:2015 QMS Spedag Interfreight February 2020 ISO 9001:2015 QMS Aurum Roses Ltd February 2020 ISO 9001:2015 QMS The Aid’s Support Organization December 2020 Finance ISO 31000 LRM Space & Places LTD October 2019 Senior Management ISO 9001:2015 QMS ICON Consult October 2019 – ISO 9001:2015 QMS February 2020 ISO 14001:2015 EMS ISO 45001:2018 OHS Bimco Ltd February 2020 ISO 9001:2015 ISO 14001:2015 ISO 45001:2018 Integrated Management System Enel Power Ltd November – December ISO 9001:2015 QMS 2021 ISO 14001:2015 EMS ISO 45001:2018 OHS ~ 17 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug A b b r e v ia t i o n s QMS ISO 9001:2015:2015 Quality Management Systems EHS ISO 14001:2015:2015 Environmental Management Systems OHS ISO 45001:2018:2018 Occupational Health & Safety Management System LMS ISO 17025 Laboratory Management System ISMS ISO/IEC 27001:2013 Information Security Management Systems ~ 18 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug  FORENSIC AUDITS & SUPPLY OF TOOLS  Consultant on a computer forensic audit on the payroll data base of pensioners managed by Ministry of Public Service. Was tasked by the Inspectorate of Government (IGG) with the retrieval of forensically legally sound electronic evidence of ghost pensioners and provision of litigation support in attendant judicial proceedings. (Nov 2010 to date. Technical audit took 10 working days. Forensic Judicial representation ended in 2012).  Consultant on a computer forensic audit aimed at retrieving digital evidence from an identified electronic media pertaining to transactions on 170 Accounts of Public Institutions in Bank of Uganda during the period 2008 -2010. Was tasked by the IGG to retrieve the data in a forensically sound manner and ensure the digital exhibits are clearly lucid. (2010)  Consultant on a computer forensic audit on computers from illegal Microfinance institutions i.e. Dutch International, COWE, T.E.A.M etc. on an assignment commissioned by Bank of Uganda in collaboration with CID, Uganda Police Force. – (2009)  Consultant on a number of highly sensitive electronic/ hi-tech crimes for the Uganda Police Force. Key tasks include: advising on best practices regarding investigations and prosecutions, gathering and preserving incriminating evidence from electronic evidence in a manner which is authentic, complete and reliable and presenting that evidence for purposes of further investigations or court prosecutions, and providing litigation support as expert witnesses. Investigations have covered computers, phones, audio files, tablets, Digital Cameras /Videos / CCTV footage, Call Data Record Analysis from Telecoms, E-mail etc. (2009 – On-going) ~ 19 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug  Contracted by Lion Assurance (U) Ltd on an email forensic audit and ancillary forensic litigation support (2014)  Consultant on a number of computers forensic audits investigating electronic fraud at Stanbic Bank. CFS is engaged by Stanbic Bank (U) Ltd as a service provider for these classified services. Key tasks include: performance of forensic audits, watching brief and expert testimony. (2014 – To Date)  Network Audit and Data Recovery, Demobilization Unit of the Government of Rwanda (2009)  Authorized distributor to upgrade the UFED classic logical ruggedized s/n 5559846 forensic device and to offer training courses to the Joint Anti-Terrorism Task Force, a security agency created by the Government of Uganda under the Anti-Terrorism Act 2009 (2009 - December 2014)  Supplied the Uganda Communications Commission (UCC), Computer Emergency Response Team (CERT) with mobile forensic tool kits, under contract with UCC (March 2015)  Consultancy Services for Forensic Audit for CORSU Hospital (November 2019) ~ 20 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug  Legal & Policy Development. Training & Audit  Assessed compliance to cyber laws, for Bank of Uganda – (Aug 2014 – 2016)  Consultancy Services for Adoption of ISO 27000 Information Security Management System Family of Standards for Bank of Uganda (BoU) (2020)  Uganda Institute of Banking & Financial Services (UIBFS) and Greenbridge School of Open Technologies, developing and training in the following professional skills courses: IT Governance and Regulatory Compliance, Computer Forensics, IT Risk Management in Banking Operations, Risk, Fraud & Internal Controls, Internet Banking, Cloud Computing, Cyber Security, Cyber Warfare & Cyber Intelligence, Computer Emergency Response Team (CERT) Setup, Auditing Emerging Security Threats, Handling & Presentation of Electronic Evidence, IT Expert Court Testimony, Enterprise Security, Information Security Strategies, Data Privacy, e-Commerce, Business Models etc. for commercial bankers, members of the Justice Law & Order Sector and other professionals- (2009).  Consultancy Services for training Quality Systems Implementers and Auditors under the Directorate of Forensics Services – Uganda Police Force (UPF) (May 2019 - date)  Computer Forensic training of auditors working with the Office of the Auditor General in IT & Legal aspects of computer forensics. (August 2011)  Computer Forensic training of auditors working in the Audit Department of Tropical Bank (U) Ltd in computer forensics. (2011)  Computer Forensic training of auditors working in the Audit Department of Kenya Commercial Bank (U) Ltd in IT & Legal aspects of computer forensics. (2012)  Computer Forensic training of auditors and lawyers working in the FINCA (U) Ltd in IT & Legal aspects of computer forensics. (13th – 14th February 2014)  Questioned Document Induction Training, organized under the auspices of the Uganda Bankers Committee Fraud and Forgeries Committee and Western Union, for representatives from 10 banks, (6th February 2014)  Conducted Certified Training to the Uganda Communications Commission (UCC), Computer Emergency Response Team (CERT) from 26th August 2015 to 30th October 2015 in: EnCase® v7 OnDemand Computer Forensics II Access Data Forensic Toolkit® (FTK®) v.5 Induction ~ 21 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug  System Development  Development of a M & E Tracking and Management System for Northern Uganda Aids, Malaria & TB Programme (NUMAT), a USAID Project – Sept 2008 – March 2009  Development of a M & E system to monitor and track project activities and integrate with the National Health Information Sharing System and USAID Partner systems on an assignment commissioned by Northern Uganda Health Integration to Enhance Services (NU-HITES) a USAID and Ministry of Health Project, - Aug – Oct 2013  Deployment of a Bank Supervision Application (BSA) for use in all the commercial banks and micro- finance institutions in Uganda under a contract with Bank of Uganda. (August 2012 – December 2012),  Development and deployment of an Enterprise Resource Management Platform and provide technical support for enterprise infrastructure for St. Catherine’s Hospital. The scope of the assignment encompassed internal information systems / office automation as well as integrating into the healthcare daily workflow and delivery process. (2011 - 2013)  Development of an ERP and Clinic Management System for Rapha Health Services (2014)  Development of an ERP Systems and operations management, and accounts platform for Ultimate Security Ltd, (2009)  Development of an ERP system and network support for X-Tel Limited, 2009  Setting up of data storage for Uganda Telecom Ltd’s data warehouse, writing python Extract- Transform-Load scripts for integration of ability in UTL’s data warehouse, training systems administrators and writing systems documentation (2009)  Development of a Mobile Market Place for trade and ERP for TeleSoft Solutions Ltd (2006)  Development of a case management system for (a) the Uganda Police Force, (2008 – To Date) and (2) the Directorate of Interpol – National Central Bureau (NCB) – Kampala (2013 – to Date). The systems were successfully tested and piloted.  Deployment of an Automatic Number Recognition System (ANPR) for the Uganda Police Force, during CHOGM (Commonwealth Heads of Government Meeting in Kampala) ~ 22 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug  Development of a vehicle licensing management system for Transport Licensing Board, Under Ministry of Works & Transport (2012) ~ 23 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug  SUMMARY The field of Forensics is a relative novelty in the region but the necessity for its development and the demand for its benefits are undeniable. Computer Forensics Consult has taken a pioneering role in harnessing innovations in technology and experience of its team to aid individuals, organizations, systems and government(s) cope with the eminent increase in electronic crime. ~ 24 ~ COMPUTER FORENSICS CONSULT LIASON OFFICE TEL: +256-779087980 | +256-776-712346 [email protected] www.forensics.co.ug