Interviews are a must for IT incident-response teams

According to Steve Santorelli of team Cymru, the part of interviewing internal employees during forensics investigations should not be taken lightly! Actually, it is an important part of the investigative process and should be done properly and should be well documented. Employee interviews such as, exit interviews are very critical when handling insider incidents especially if an employee has been terminated.

Read more - http://www.darkreading.com/insider-threat/167801100/security/news/240001967/the-importance-of-interviews-in-insider-investigations.html