Working with Law Enforcement

Working with Law Enforcement

Coordination with law enforcement requires careful consideration:

When to Involve Law Enforcement:

  • Confirmed criminal activity
  • Significant financial loss
  • Nation-state attacks
  • Child exploitation material
  • Threats to critical infrastructure
  • Contractual requirements

Law Enforcement Coordination:

class LawEnforcementCoordinator:
    def __init__(self):
        self.contacts = {
            'FBI': {'cyber': '1-800-CALL-FBI', 'ic3': 'www.ic3.gov'},
            'Secret Service': {'ecft': 'local-field-office'},
            'Local': {'dept': 'cyber-crimes-unit'}
        }
    
    def prepare_for_law_enforcement(self):
        checklist = [
            "Preserve all evidence",
            "Document chain of custody",
            "Prepare executive summary",
            "Identify key technical contacts",
            "Gather business impact data",
            "Review disclosure implications",
            "Consult legal counsel"
        ]
        return checklist