Digital forensics specialist conducts complex post-incident forensic analysis to investigate causes of intrusion, attack, loss or breach occurring in an organisation. He/she identifies and defines forensic issues and root causes. He/she develops reports that detail incident timeline, evidence, findings, conclusions and recommendations. He/she supports the design of a breach notification process after a security incident to minimise damage and downtime when attacks and exploits occur. He/she selects, tests and deploys security products and collects information about Internet-based criminal activities. He/she recommends corrective actions to prevent and mitigate internal control failures.