Imagine a difficulty in the workplace. An employee is fired. Years later:
Q: How can factual information be gathered to make a decision in this case?
A: Save a forensic image of the computer used by the employee before it is reused, recycled or lost.
A policy of imaging computers or just archiving, cataloging and securing hard drives is inexpensive and effective. We like the Ditto hardware for making forensic images.
PS: The same strategy is also effective for employer-owned phones.
Five employees of the county falsely sued claiming discrimination. County email backups and images of county computers were available. We worked with the attorney defending the county to produce evidence.
The jury decision gave nothing to the plaintiffs.