Each side of the triad in Figure 1-2 represents a group or department responsible for performing
the associated tasks. Although each function operates independently, all three groups
draw from one another when a large-scale computing investigation is being conducted. By
combining these three groups into a team, all aspects of a high-technology investigation are
addressed without calling in outside specialists.
The term enterprise network environment refers to large corporate computing systems that
might include disparate or formerly independent systems. In smaller companies, one group
might perform the tasks shown in the investigations triad, or a small company might contract
with other companies for these services