What to do if arrives at the premises where you are working and demand to be given access to IT files, servers (etc)

Preliminary

• An IT representative has been appointed to act upon requests of the officers.
• The IT representative is part of the designated internal coordination team.

Conduct

• Follow the instructions of the internal coordination team.
• Ensure you are available at all times to facilitate the internal coordination team's operations in relation to the investigation.
• Execute the tasks as listed below in a cooperative manner, but only to the extent requested.

Tasks

• Inform your manager (or his back-up) about the investigation taking place.
• Await approval from a member of the internal coordination team (ADD INDIVIDUALS) before starting with any requests of the officers.
• Respond to any IT-related questions posed by the officers.
• Prepare network logon credentials for the officer(s), if requested.
• Make available a (number of) PC(s) and/or printers for the officer(s), if requested.
• Forward any specific requests of the officers for execution as appropriate, in each case informing the internal coordination team of the specific request.
• Make copies of all electronic data delivered to, or copied by, the officer(s).
• Take back all PCs and/or printers temporarily used by the officer(s), and de-activate and delete any login credentials prepared for the officers, after the investigation ends, or when instructed to do so by a member of the internal coordination team.

Release any PCs used by the officers for normal use after the investigation ends, or when instructed to do so by a member of the internal coordination team.