White Florist is a large dis- tributor of flowers on the U.S. East Coast. The company has a web server farm where customers can bulk order flowers online. Two days before Christmas, one of the company's busiest periods, its web server was subjected to a denial of service (DOS) attack. As a result on December 23 and 24, their customers could not place orders on the web server. Frank Folk, the CEO, es- timates the loss at $1 million. The system administrator, Carol George, did not notify anyone in the company about the DOS at- tack until after the first day of the attack: December 24. At the present time, the at-tacker or attackers have not been identified.

Carol George does not believe they will ever be able to identify the attackers.

Frank Folk believes that the loss could have been reduced and the hacker identified if the proper people in the company were immediately notified about the attack.

You, as a noted forensics expert, have been contacted to help White Florist determine who in the company should be immediately involved in an investigatory role if such an attack is made on the company again. Identify departments in the company to notify and the role they should play.