Executive access. Sensitive information. Clear answers.
Executive Departure Core Analysis
An executive is leaving and the company needs to understand what happened to strategic or proprietary information. GDF Core Analysis provides a flat-rate forensic examination of the agreed computer and business accounts, with a clear timeline for leadership and counsel.
The engagement
Understand how sensitive business information was used
Executives may have access to board materials, financial forecasts, customer strategy, acquisition plans and other information spread across multiple business systems. A departure can raise questions that require a coordinated examination of those records.
GDF preserves the agreed computer system, email and documents, then analyzes the executive’s relevant activity before departure. Email, chat histories, cloud storage and available AI-use records can be correlated to show the sequence of events involving sensitive material.
The examination is organized around the company’s questions. Which records were accessed or shared? Were documents copied, sent or deleted? How do the communications and file events relate to the departure timeline? A clear account helps the board, management and counsel decide what needs further attention.
Core Analysis uses GDF’s established forensic process and is offered at a flat rate for the agreed scope. We define the sources, relevant period, authorized contacts and reporting needs so the work is focused on the executive’s role and the company’s concerns.
Scope
Map executive access
Identify the relevant devices, email accounts, shared repositories and business records with authorized company representatives. Focus on the access and responsibilities associated with the executive’s role.
Preserve strategic records
Forensically preserve the agreed system, documents and communications. Maintain the evidence record while leadership manages the business transition.
Review communications and sharing
Examine email, attachments, chat histories and available cloud-sharing records. Connect recipients, dates and documents to the questions raised by the departure.
Examine cloud and AI activity
Evaluate relevant OneDrive, Google Workspace, Box, Dropbox and available AI-use records. Correlate those events with the computer and communications evidence.
Reconstruct the sequence
Build a timeline around the relevant decision, notice and departure dates. Explain significant access, copying, transfer and deletion activity with supporting records.
Report for leadership and counsel
Produce a concise, plain-language account of the findings. Counsel can use the technical evidence when evaluating confidentiality, trade-secret or fiduciary-duty concerns.
Methodology
From the business question to a clear report
-
Define the scope
Discuss the business events, authorized sources, period and questions. Confirm the flat-rate examination scope.
-
Preserve the records
Forensically preserve the agreed computer, email and documents and record their handling.
-
Analyze and correlate
Examine relevant activity across the sources and connect the events into a timeline.
-
Explain the findings
Provide a clear, concise report and discuss the findings with the business and counsel.
Evidence commonly examined
Evidence reviewed
- Computer-system and file activity
- Business email, attachments and chat histories
- Documents and cloud storage such as OneDrive, Google Workspace, Box and Dropbox
- Available AI-use records and supporting account activity
What you can expect
What you receive
- Forensic preservation and evidence-handling documentation
- A timeline of relevant events and activity
- A concise report for non-technical readers
- Supporting records and a discussion of the findings
Frequently asked
Common questions
An executive is leaving. Can GDF determine what happened to company information?
Yes. GDF Core Analysis examines relevant computer and business-account evidence, preserving the agreed sources and creating a timeline of activity involving the information the company is concerned about.
Is executive Core Analysis offered at a flat rate?
Yes. We agree the examination scope, sources, relevant period and reporting needs before work begins, then provide Core Analysis as a flat-rate service for that scope.
Can you examine activity across several business systems?
Yes. We correlate relevant computer, email, chat, cloud-storage and available AI-use records to provide a coordinated view of the executive’s activity.
Can this help with a breach-of-fiduciary-duty concern?
Yes. The examination can establish a technical record of communications, information use and transfers for counsel to assess in connection with fiduciary-duty and other business concerns.
Who is the report written for?
The report is designed to be useful to non-technical readers, including directors, business leaders and counsel. It explains the sequence of relevant events and the records supporting the findings.
Can you provide expert support after the analysis?
Yes. GDF can discuss reports, affidavits, deposition and testimony support if the matter calls for a further expert engagement.
Related capabilities
Related services
Talk with an examiner
Discuss the matter and the next step.
Call to discuss timing, scope and the safest way to share information. Do not send evidence or credentials by email.
24/7 hotline: 1-800-868-8189