Examining A Global End-To-End Deployment Of Forensics and eDiscovery at Deutsche Bank (A Case Study)

John Wilson- Discovery Squared, LLCRobert O’Leary – Nuix Sr. Solutions Consultant, Digital Forensics SME

• Introduction• Overview of Deutsche Bank’s goal• Deutsche Bank Hub and Spoke Model• Nuix’s Proposed Solution• Overview of Implementation Plan• Status• Questions

Agenda

Speakers

Robert J. O’Leary CFCE; DFCPRobert retired from the New Jersey State Police and where he established the High Technology Crimes Unit. He has developed and conducted training Technology Crime and supervised the first New Jersey Statewide Computer Crimes Task Force. He also served as the Director of the NIJ Electronic Crime Technology Center of Excellence a project established to build the capacity of State and Local Law Enforcement to prevent, investigate and prosecute Electronic Crime and the Director of AccessData Professional Services. He has 25 years of experience in digital evidence examination, electronic crime investigation, incident response and cyber security assessments. He is a member of the International Association of Computer Investigative Specialists (IACIS) and the High Technology Crimes Investigator’s Association (HTCIA). He has served on the Board of Directors of the National White Collar Crime Center (NW3C), and as an advisor to the United Nations Innocence in Danger project. He earned a Bachelor of Science Degree in Business Administration from Bloomsburg University.

Speakers

John M Wilson, ACE, AME, CBEJohn Wilson is a licensed private investigator, certified examiner and information technology veteran with over two decades of experience working with the US government, public, and private companies. He serves clients in many industries as a trusted advisor to law firms, corporate legal departments, financial institutions, outside counsel and executives on best practices for litigation readiness.

In his role as a computer forensics expert and technologist, John has testified as an expert witness in state and federal courts. Additionally, he has conducted computer forensic investigations nationally and internationally on behalf of law firms, companies and governmental agencies including Fortune 500 companies, AMLAW 100 firms, Senate Oversight Committees, the U.S. Securities and Exchange Commission (SEC), Federal Deposit Insurance Corporation (FDIC) and the U.S. Department of Justice (DOJ).

Overview of Deutsche Bank’s goal

• Deutsche Bank issued an RFP for a comprehensive global data collection solution from endpoints and network resources across 5 regions and a test environment for:– Investigations– eDiscovery – Compliance Review– Audits

• A single solution that would meet GDPR requirements AND be compatible with the Deutsche Bank Hub and Spoke model

Overview of Deutsche Bank’s goal

• Deutsche Bank identified – approximately 700 functional and non-functional requirements for the global

solution– 67 Uniform testing criteria– 12 month global implementation schedule for a test environment and

production and disaster recovery environments in 5 regions globally – Verification that data collected is retained and maintained in corresponding

region– User training

Deutsche Bank Hub and Spoke Model

Nuix Collection Project Solution

Proposed US Implementation

Proposed UK Implementation

Proposed Germany Implementation

Proposed Singapore Implementation

Status

• The test environment has been completed and is operational• The US Production Environment has been completed and is operational• The US Disaster Recovery environment implementation is in progress• The UK Production Environment has been implemented• The UK Disaster Recovery Environment implementation is in progress• The remaining regions Production and DR are scheduled to be completed by

the end of 2017• User training development is underway, delivery will commence in October

In summary

• The Nuix comprehensive collection solution met Deutsche Bank’s needs

• The Nuix global implementation proposal met the– Functional and non-functional requirements– 67 Uniform testing criteria– 12 month global implementation schedule– User training deployment

• The Nuix solutions met the GDPR requirements