Ching Liu


  • EMEA
  • Security Risk Management
  • Crisis Response
  • Investigations, Litigation and Forensics
  • Training and Development Solutions

Ching Liu is a Principal for Control Risks’ Discovery and Data Insights team based in London. He is responsible for the digital forensics and electronic discovery practice across EMEA and has over 25 years’ experience in the digital forensics industry, providing subject matter expertise across the globe.

He frequently assists clients in leveraging technology solutions for forensic investigations and matters ranging from insider threats, data theft and corporate fraud, to complex DFIR cyber breaches such as ransomware, system attacks, spear-phishing and email compromises.

Ching has given independent expert testimony in international courts of law from arbitration to criminal crown court. Ching also advises on the full spectrum of technology consulting such as cyber security and response, electronic discovery, data analytics and information security, including regulatory mandates and data privacy. 

Ching has again been recognised in the Who’s Who Legal’s Data Guide for 2024. The listing recognises experts who support corporate clients in managing data projects, investigations and complex data appraisals, garnering respect for their depth of knowledge in the space.

Recent tasks that Ching has worked on include:

  • Led the global forensic technology team to perform DFIR and forensic technology (legal technology and data analytics) consultancy for one of the world’s leading data insight companies (with a 35,000+ server and endpoint estate), who had suffered a global ransomware attack. This included the forensic acquisition, analysis and subsequent PII review of several hundred terabytes of potentially exfiltrated data.
  • Performed expert forensic consultancy and examination for an international education establishment against their rogue IT team. This required deployment of remote forensic tooling for the defensible collection, analysis, and recovery of data from email servers and cloud-based audit trails to investigate illegal access and dissemination of personal information.
  • Assisted an international financial institute with the forensic investigation of the misappropriation of funds in a government corruption scandal in Africa, where digital forensic analysis was key in obtaining evidence from laptops and mobile devices that was subsequently used in testimony in court.
  • Led a digital forensic team across EMEA performing the secure acquisition of virtual servers and laptop devices for significant number of custodians and created a workflow for the rapid extraction of ESI data for eDiscovery review for a multi-jurisdiction regulatory investigation.
  • Manages the EMEA team of DFIR consultants to delivery on hundreds of complex cyber response projects per year, ranging from system breaches, zero-day attacks, email compromises and ransomware extortions.
  • Prior to joining Control Risks, Ching was Systems Programming Manager of British Rail’s Freight Division where he developed and supervised the internal financial and statistical database systems which included assisting British Transport Police in the tracking of suspicious or marked consignments.

    Ching is a Certified Information Systems Security Professional (CISSP) and EnCase Certified Examiner (EnCE). He is listed in the UK Register of Expert Witnesses and is a member of the ISSA-UK. He graduated from the University of Westminster with a BSc (Hons) in Computer Science. 

    Get in touch

    Can our experts help you?

    Related articles