When law enforcement becomes involved, the need may arise to
freeze systems as part of the evidence. There is also the likelihood
that the incident will become known publicly. Do you think these issues
play a significant part in the decision to involve law enforcement? Why
or why not?
Can you name some situations in which you believe that large organizations have decided not to involve law enforcement?