As often overlooked by security managers until crime or misconduct becomes a reality, the chief information security officer (CISO) must be prepared for the legal, potential law enforcement, and technical challenges of investigations. In fact, these challenges may be too much for the average organization and third party. Contracted support may be needed. Even in this case, an investigation must be planned for, and the evidence must be protected until law enforcement or professional investigative services can be secured. Discuss the following:

Is it better for an organization to employ personnel who are skilled in digital forensics or to contract this function from an outside organization?