Ideally there would be a plan and steps that would be followed that addressed the issue of confidentiality yet that is not always the case. If the team wanted investigation confidentiality, a third-party person or group would assist in the incident response. That way they would have no reason to hide anything as they would be neutral and hopefully trained correctly (you never know). If a third party was not financially feasible, a designated group should be used that follow proper protocol as spelled out in NIST guidelines that were suggested for this assignment. For example, there should be no discussion of findings as the investigation is underway as well as any documents should be discretely covered as notes are being documented. The Computer
