Kajen Subramoney

Examples of Kajen’s experience include:

• Led key components of a cyber-investigation at a large African bank into the theft of tens of millions of dollars over a period of a few hours from thousands of automatic teller machines in various jurisdictions. Kajen’s effort involved driving the broader investigative agenda and crisis response whilst combining the efforts of largely disparate teams of technical experts working with a vast data landscape which was found to be poorly managed. The work involved mapping the data landscape with regards the transacting environment at the bank, particularly in relation to card-provider transactions, to identifying weaknesses in the data chain and inconsistencies in the data. Identified inconsistencies were translated into control improvements and better data governance protocols to mitigate the future risk of similar attacks. With better visibility of the data landscape, the technical teams were able to effectively deal with investigation, response and remediation. This included the improvements to data retention protocols and real-time monitoring of network traffic to better alert the organisation to future attack attempts.
• Investigated a potential cyber breach at a large European manufacturer, with offices across the Middle East. Customers of the client were targeted by a phishing attack, resulting in unlawful transfers of more than USD 5 million, ostensibly to our client. The client was concerned that they were hacked, resulting in their customers being defrauded. The investigation determined the modus operandi of the cyber breach, identified weaknesses in infrastructure and helped the client with a strong position, whilst they aided loyal customers in unravelling the attack.
• Led the data management and forensic data analysis component of an investigation relating to financial irregularities at one of the largest global providers of outsourcing services based in India. The quantum of investigated fraud exceeded USD 2.8 billion, making this one of the largest fraud cases ever uncovered. The entity in question operated on more than 15 disparate, home-grown systems managing everything from client relationships to human resources, transacting and banking. In the absence of any documentation, Kajen worked with the limited remaining client staff and led over 70 data analysts to map out the data paths and end points to analyse business flows and transacting activity. The output of the exercise provided insight into how to execute and manage day-to-day business going forward as well as key insights to inform the investigation into the modus operandi of the fraud, quantifying prejudice and understanding the true financial position.
• Led an investigation into potential exchange control and anti-money laundering infringements by a major bank. Transaction volumes in excess of USD 100 million were in question with regards both source of funds and knowing the customer. The bank required a detailed investigation into how the transactions were committed over a more than 5-year period. The investigation provided the bank with the information they required to disclose the matter to the various regulatory bodies and address any potential penalties imposed.
• Worked with investigators on a fraud scheme amounting to more than 70,000 counts of fraud to uncover the modus operandi. The work required understanding the broad data landscape across multiple entities and mapping the data flows to identify gaps and risks that were exploited in committing the fraud. The exercise yielded operational and governance intelligence which was used in bolstering the data and information governance protocols across collaborating partners within the entire sector.
• Worked with a prominent UK-based law firm to manage a large-scale eDiscovery effort involving three custodian entities across all phases from collection through to redaction and hosting for review. The matter involved highly sensitive data which required a review by the end client before being accessed and reviewed by the UK law firm. The process was managed in a way which satisfied all stakeholders, including counterparties in the UK, and provided results with strong evidential integrity.